Warning: Permanently added '[localhost]:6378' (ED25519) to the list of known hosts. 2025/08/30 11:08:31 parsed 1 programs [ 134.386253][ T5631] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 138.009096][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.012247][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.771130][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.774708][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.805106][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.809388][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.395058][ T5403] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 140.401860][ T5403] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 140.406180][ T5403] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 140.416112][ T5403] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 140.420239][ T5403] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 141.781896][ T5698] chnl_net:caif_netlink_parms(): no params data found [ 141.843631][ T5698] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.847822][ T5698] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.851055][ T5698] bridge_slave_0: entered allmulticast mode [ 141.855120][ T5698] bridge_slave_0: entered promiscuous mode [ 141.860987][ T5698] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.864232][ T5698] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.868531][ T5698] bridge_slave_1: entered allmulticast mode [ 141.872566][ T5698] bridge_slave_1: entered promiscuous mode [ 141.899917][ T5698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.907568][ T5698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.931878][ T5698] team0: Port device team_slave_0 added [ 141.937320][ T5698] team0: Port device team_slave_1 added [ 141.959089][ T5698] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.962318][ T5698] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.974464][ T5698] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.980942][ T5698] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.984076][ T5698] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.996030][ T5698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 142.032906][ T5698] hsr_slave_0: entered promiscuous mode [ 142.036094][ T5698] hsr_slave_1: entered promiscuous mode [ 142.560916][ T5698] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 142.579396][ T5698] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 142.588510][ T5698] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 142.600077][ T5698] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 142.751557][ T5698] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.793311][ T5698] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.829555][ T1040] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.832811][ T1040] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.839485][ T1040] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.842733][ T1040] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.235691][ T5698] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.314458][ T5698] veth0_vlan: entered promiscuous mode [ 143.338792][ T5698] veth1_vlan: entered promiscuous mode [ 143.402116][ T5698] veth0_macvtap: entered promiscuous mode [ 143.410234][ T5698] veth1_macvtap: entered promiscuous mode [ 143.442420][ T5698] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.465445][ T5698] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.489584][ T1089] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.510232][ T1089] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.523498][ T1089] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.538488][ T1089] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.774120][ T1040] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.857970][ T1040] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.925511][ T1040] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.029104][ T1040] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2025/08/30 11:08:46 executed programs: 0 [ 145.179040][ T4708] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 145.183971][ T4708] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 145.188832][ T4708] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 145.197151][ T4708] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 145.200645][ T4708] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 145.559001][ T5767] chnl_net:caif_netlink_parms(): no params data found [ 145.704737][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.728457][ T5767] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.731840][ T5767] bridge_slave_0: entered allmulticast mode [ 145.747128][ T5767] bridge_slave_0: entered promiscuous mode [ 145.778684][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.781871][ T5767] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.785076][ T5767] bridge_slave_1: entered allmulticast mode [ 145.810917][ T5767] bridge_slave_1: entered promiscuous mode [ 145.952619][ T1040] bridge_slave_1: left allmulticast mode [ 145.956305][ T1040] bridge_slave_1: left promiscuous mode [ 145.965645][ T1040] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.978443][ T1040] bridge_slave_0: left allmulticast mode [ 145.980973][ T1040] bridge_slave_0: left promiscuous mode [ 145.983610][ T1040] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.477210][ T1040] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 146.483587][ T1040] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 146.501111][ T1040] bond0 (unregistering): Released all slaves [ 146.520426][ T5767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.559747][ T5767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.600214][ T1040] hsr_slave_0: left promiscuous mode [ 146.618209][ T1040] hsr_slave_1: left promiscuous mode [ 146.621193][ T1040] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.624705][ T1040] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.638566][ T1040] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.641999][ T1040] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.672571][ T1040] veth1_macvtap: left promiscuous mode [ 146.675170][ T1040] veth0_macvtap: left promiscuous mode [ 146.696107][ T1040] veth1_vlan: left promiscuous mode [ 146.700339][ T1040] veth0_vlan: left promiscuous mode [ 147.161165][ T1040] team0 (unregistering): Port device team_slave_1 removed [ 147.190019][ T1040] team0 (unregistering): Port device team_slave_0 removed [ 147.287311][ T5403] Bluetooth: hci0: command tx timeout [ 147.473318][ T5767] team0: Port device team_slave_0 added [ 147.498067][ T5767] team0: Port device team_slave_1 added [ 147.573113][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.581413][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.614450][ T5767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.638262][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.641418][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.677614][ T5767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.784259][ T5767] hsr_slave_0: entered promiscuous mode [ 147.797832][ T5767] hsr_slave_1: entered promiscuous mode [ 148.511328][ T5767] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 148.529926][ T5767] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 148.536237][ T5767] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 148.560346][ T5767] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 148.699184][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.741632][ T5767] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.764149][ T1040] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.767404][ T1040] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.778941][ T1040] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.782101][ T1040] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.852272][ T5767] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 149.159651][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.209282][ T5767] veth0_vlan: entered promiscuous mode [ 149.219181][ T5767] veth1_vlan: entered promiscuous mode [ 149.247269][ T5767] veth0_macvtap: entered promiscuous mode [ 149.252909][ T5767] veth1_macvtap: entered promiscuous mode [ 149.268611][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.280394][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.291756][ T1041] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.303046][ T1041] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.315610][ T1041] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.329907][ T1041] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.367451][ T5403] Bluetooth: hci0: command tx timeout [ 149.379889][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.383568][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.420040][ T1041] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.423540][ T1041] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.671419][ T5834] loop0: detected capacity change from 0 to 32768 [ 149.684134][ T5834] ======================================================= [ 149.684134][ T5834] WARNING: The mand mount option has been deprecated and [ 149.684134][ T5834] and is ignored by this kernel. Remove the mand [ 149.684134][ T5834] option from the mount to silence this warning. [ 149.684134][ T5834] ======================================================= [ 149.743145][ T5834] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 149.765175][ T5834] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 149.798358][ T5834] ================================================================== [ 149.802103][ T5834] BUG: KASAN: slab-use-after-free in ocfs2_claim_suballoc_bits+0x8b2/0x2450 [ 149.806065][ T5834] Read of size 4 at addr ffff88804dc4a000 by task syz.0.16/5834 [ 149.810498][ T5834] [ 149.811630][ T5834] CPU: 0 UID: 0 PID: 5834 Comm: syz.0.16 Not tainted syzkaller #0 PREEMPT(full) [ 149.811645][ T5834] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 149.811652][ T5834] Call Trace: [ 149.811659][ T5834] [ 149.811665][ T5834] dump_stack_lvl+0x189/0x250 [ 149.811684][ T5834] ? __kasan_check_byte+0x12/0x40 [ 149.811699][ T5834] ? __pfx_dump_stack_lvl+0x10/0x10 [ 149.811713][ T5834] ? lock_release+0x4b/0x3e0 [ 149.811730][ T5834] ? __virt_addr_valid+0x4a5/0x5c0 [ 149.811745][ T5834] print_report+0xca/0x240 [ 149.811755][ T5834] ? ocfs2_claim_suballoc_bits+0x8b2/0x2450 [ 149.811767][ T5834] kasan_report+0x118/0x150 [ 149.811779][ T5834] ? ocfs2_claim_suballoc_bits+0x8b2/0x2450 [ 149.811791][ T5834] ocfs2_claim_suballoc_bits+0x8b2/0x2450 [ 149.811806][ T5834] ? check_path+0x21/0x40 [ 149.811818][ T5834] ? __pfx_ocfs2_claim_suballoc_bits+0x10/0x10 [ 149.811827][ T5834] ? lockdep_unlock+0x89/0x120 [ 149.811840][ T5834] ? validate_chain+0x897/0x2140 [ 149.811855][ T5834] ? __lock_acquire+0xab9/0xd20 [ 149.811871][ T5834] ocfs2_claim_new_inode+0x332/0x7a0 [ 149.811884][ T5834] ? __pfx_ocfs2_claim_new_inode+0x10/0x10 [ 149.811895][ T5834] ? _raw_spin_lock_irq+0xae/0xf0 [ 149.811969][ T5834] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 149.811984][ T5834] ocfs2_mknod_locked+0x100/0x250 [ 149.812001][ T5834] ? __pfx_ocfs2_mknod_locked+0x10/0x10 [ 149.812016][ T5834] ? dquot_alloc_inode+0x216/0xa50 [ 149.812035][ T5834] ? ocfs2_block_signals+0x94/0xe0 [ 149.812048][ T5834] ? __pfx_ocfs2_block_signals+0x10/0x10 [ 149.812062][ T5834] ? ocfs2_init_security_get+0x9f/0x1a0 [ 149.812074][ T5834] ocfs2_mknod+0x10c7/0x2050 [ 149.812093][ T5834] ? __pfx_ocfs2_mknod+0x10/0x10 [ 149.812115][ T5834] ? __pfx_ocfs2_find_entry+0x10/0x10 [ 149.812127][ T5834] ? __lock_acquire+0xab9/0xd20 [ 149.812146][ T5834] ? look_up_lock_class+0x74/0x170 [ 149.812161][ T5834] ? register_lock_class+0x51/0x320 [ 149.812177][ T5834] ? __lock_acquire+0xab9/0xd20 [ 149.812193][ T5834] ? __lock_acquire+0xab9/0xd20 [ 149.812210][ T5834] ? do_raw_spin_lock+0x121/0x290 [ 149.812224][ T5834] ? do_raw_spin_unlock+0x4d/0x240 [ 149.812237][ T5834] ? rcu_is_watching+0x15/0xb0 [ 149.812248][ T5834] ? ocfs2_lookup+0x5b9/0x9b0 [ 149.812263][ T5834] ocfs2_create+0x1a5/0x440 [ 149.812277][ T5834] ? __pfx_ocfs2_lookup+0x10/0x10 [ 149.812290][ T5834] ? from_kgid+0x1b0/0x650 [ 149.812305][ T5834] ? __pfx_ocfs2_create+0x10/0x10 [ 149.812318][ T5834] ? HAS_UNMAPPED_ID+0x11a/0x180 [ 149.812333][ T5834] ? inode_permission+0x149/0x470 [ 149.812347][ T5834] ? __pfx_ocfs2_permission+0x10/0x10 [ 149.812361][ T5834] ? bpf_lsm_inode_create+0x9/0x20 [ 149.812377][ T5834] ? __pfx_ocfs2_create+0x10/0x10 [ 149.812391][ T5834] path_openat+0x14f1/0x3830 [ 149.812401][ T5834] ? arch_stack_walk+0xfc/0x150 [ 149.812420][ T5834] ? __pfx_path_openat+0x10/0x10 [ 149.812430][ T5834] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.812444][ T5834] do_filp_open+0x1fa/0x410 [ 149.812453][ T5834] ? __lock_acquire+0xab9/0xd20 [ 149.812467][ T5834] ? __pfx_do_filp_open+0x10/0x10 [ 149.812481][ T5834] ? _raw_spin_unlock+0x28/0x50 [ 149.812492][ T5834] ? alloc_fd+0x64c/0x6c0 [ 149.812508][ T5834] do_sys_openat2+0x121/0x1c0 [ 149.812524][ T5834] ? __se_sys_futex+0x36f/0x400 [ 149.812539][ T5834] ? __pfx_do_sys_openat2+0x10/0x10 [ 149.812555][ T5834] ? rcu_is_watching+0x15/0xb0 [ 149.812567][ T5834] __x64_sys_openat+0x138/0x170 [ 149.812584][ T5834] do_syscall_64+0xfa/0x3b0 [ 149.812600][ T5834] ? lockdep_hardirqs_on+0x9c/0x150 [ 149.812614][ T5834] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.812624][ T5834] ? clear_bhb_loop+0x60/0xb0 [ 149.812637][ T5834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.812648][ T5834] RIP: 0033:0x7f09c098d169 [ 149.812660][ T5834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.812669][ T5834] RSP: 002b:00007f09c172d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 149.812683][ T5834] RAX: ffffffffffffffda RBX: 00007f09c0ba5fa0 RCX: 00007f09c098d169 [ 149.812690][ T5834] RDX: 0000000000105042 RSI: 0000400000000080 RDI: ffffffffffffff9c [ 149.812697][ T5834] RBP: 00007f09c0a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 149.812704][ T5834] R10: 00000000000001db R11: 0000000000000246 R12: 0000000000000000 [ 149.812710][ T5834] R13: 0000000000000000 R14: 00007f09c0ba5fa0 R15: 00007fffe9bc40e8 [ 149.812722][ T5834] [ 149.812726][ T5834] [ 150.004810][ T5834] Allocated by task 5767: [ 150.006689][ T5834] kasan_save_track+0x3e/0x80 [ 150.008691][ T5834] __kasan_kmalloc+0x93/0xb0 [ 150.010755][ T5834] __kmalloc_noprof+0x27a/0x4f0 [ 150.013067][ T5834] fib_create_info+0x1728/0x3210 [ 150.015382][ T5834] fib_table_insert+0xc6/0x1b50 [ 150.017590][ T5834] fib_magic+0x2c4/0x390 [ 150.019479][ T5834] fib_add_ifaddr+0x144/0x5f0 [ 150.021799][ T5834] fib_netdev_event+0x382/0x490 [ 150.023992][ T5834] notifier_call_chain+0x1b6/0x3e0 [ 150.026239][ T5834] __dev_notify_flags+0x18d/0x2e0 [ 150.028500][ T5834] netif_change_flags+0xe8/0x1a0 [ 150.030768][ T5834] do_setlink+0xc55/0x41c0 [ 150.032761][ T5834] rtnl_newlink+0x160b/0x1c70 [ 150.034887][ T5834] rtnetlink_rcv_msg+0x7cc/0xb70 [ 150.037132][ T5834] netlink_rcv_skb+0x205/0x470 [ 150.039283][ T5834] netlink_unicast+0x82f/0x9e0 [ 150.041412][ T5834] netlink_sendmsg+0x805/0xb30 [ 150.043537][ T5834] __sock_sendmsg+0x219/0x270 [ 150.045611][ T5834] __sys_sendto+0x3bd/0x520 [ 150.047651][ T5834] __x64_sys_sendto+0xde/0x100 [ 150.049877][ T5834] do_syscall_64+0xfa/0x3b0 [ 150.051969][ T5834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.054635][ T5834] [ 150.055752][ T5834] Freed by task 10: [ 150.057547][ T5834] kasan_save_track+0x3e/0x80 [ 150.059688][ T5834] kasan_save_free_info+0x46/0x50 [ 150.061877][ T5834] __kasan_slab_free+0x5b/0x80 [ 150.063939][ T5834] kfree+0x18e/0x440 [ 150.065687][ T5834] rcu_core+0xcab/0x1770 [ 150.067568][ T5834] handle_softirqs+0x283/0x870 [ 150.069689][ T5834] do_softirq+0xec/0x180 [ 150.071691][ T5834] __local_bh_enable_ip+0x17d/0x1c0 [ 150.073913][ T5834] ipv6_get_lladdr+0x2aa/0x3f0 [ 150.075996][ T5834] mld_newpack+0x420/0xc40 [ 150.077964][ T5834] add_grhead+0x5a/0x2a0 [ 150.079815][ T5834] add_grec+0x1452/0x1740 [ 150.081851][ T5834] mld_ifc_work+0x6ed/0xd60 [ 150.083936][ T5834] process_scheduled_works+0xae1/0x17b0 [ 150.086419][ T5834] worker_thread+0x8a0/0xda0 [ 150.088489][ T5834] kthread+0x70e/0x8a0 [ 150.090275][ T5834] ret_from_fork+0x3fc/0x770 [ 150.092316][ T5834] ret_from_fork_asm+0x1a/0x30 [ 150.094371][ T5834] [ 150.095432][ T5834] Last potentially related work creation: [ 150.097948][ T5834] kasan_save_stack+0x3e/0x60 [ 150.100022][ T5834] kasan_record_aux_stack+0xbd/0xd0 [ 150.102344][ T5834] call_rcu+0x157/0x9c0 [ 150.104203][ T5834] fib_create_info+0x25b0/0x3210 [ 150.106417][ T5834] fib_table_insert+0xc6/0x1b50 [ 150.108614][ T5834] fib_magic+0x2c4/0x390 [ 150.110450][ T5834] fib_add_ifaddr+0x144/0x5f0 [ 150.112576][ T5834] fib_netdev_event+0x382/0x490 [ 150.114739][ T5834] notifier_call_chain+0x1b6/0x3e0 [ 150.116983][ T5834] __dev_notify_flags+0x18d/0x2e0 [ 150.119227][ T5834] netif_change_flags+0xe8/0x1a0 [ 150.121497][ T5834] do_setlink+0xc55/0x41c0 [ 150.123708][ T5834] rtnl_newlink+0x160b/0x1c70 [ 150.125719][ T5834] rtnetlink_rcv_msg+0x7cc/0xb70 [ 150.127958][ T5834] netlink_rcv_skb+0x205/0x470 [ 150.130059][ T5834] netlink_unicast+0x82f/0x9e0 [ 150.132397][ T5834] netlink_sendmsg+0x805/0xb30 [ 150.135010][ T5834] __sock_sendmsg+0x219/0x270 [ 150.137303][ T5834] __sys_sendto+0x3bd/0x520 [ 150.139243][ T5834] __x64_sys_sendto+0xde/0x100 [ 150.141310][ T5834] do_syscall_64+0xfa/0x3b0 [ 150.143356][ T5834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.145924][ T5834] [ 150.146994][ T5834] The buggy address belongs to the object at ffff88804dc4a000 [ 150.146994][ T5834] which belongs to the cache kmalloc-256 of size 256 [ 150.153123][ T5834] The buggy address is located 0 bytes inside of [ 150.153123][ T5834] freed 256-byte region [ffff88804dc4a000, ffff88804dc4a100) [ 150.158987][ T5834] [ 150.160042][ T5834] The buggy address belongs to the physical page: [ 150.162885][ T5834] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4dc4a [ 150.166652][ T5834] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 150.169742][ T5834] page_type: f5(slab) [ 150.171478][ T5834] raw: 04fff00000000000 ffff88801a441b40 ffffea0001656c80 dead000000000008 [ 150.175219][ T5834] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 150.179104][ T5834] page dumped because: kasan: bad access detected [ 150.181954][ T5834] page_owner tracks the page as allocated [ 150.184557][ T5834] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5698, tgid 5698 (syz-executor), ts 142816257173, free_ts 141315451307 [ 150.192881][ T5834] post_alloc_hook+0x240/0x2a0 [ 150.195024][ T5834] get_page_from_freelist+0x21e4/0x22c0 [ 150.197564][ T5834] __alloc_frozen_pages_noprof+0x181/0x370 [ 150.200086][ T5834] alloc_pages_mpol+0x232/0x4a0 [ 150.202241][ T5834] allocate_slab+0x8a/0x370 [ 150.204247][ T5834] ___slab_alloc+0xbeb/0x1410 [ 150.206316][ T5834] __kmalloc_noprof+0x305/0x4f0 [ 150.208502][ T5834] fib_create_info+0x1728/0x3210 [ 150.210675][ T5834] fib_table_insert+0xc6/0x1b50 [ 150.212848][ T5834] fib_magic+0x2c4/0x390 [ 150.214975][ T5834] fib_add_ifaddr+0x144/0x5f0 [ 150.217111][ T5834] fib_inetaddr_event+0x12e/0x190 [ 150.219314][ T5834] notifier_call_chain+0x1b6/0x3e0 [ 150.221758][ T5834] blocking_notifier_call_chain+0x6a/0x90 [ 150.224715][ T5834] __inet_insert_ifa+0xa13/0xbf0 [ 150.227014][ T5834] inet_rtm_newaddr+0xf3a/0x18b0 [ 150.229202][ T5834] page last free pid 5683 tgid 5683 stack trace: [ 150.232253][ T5834] __free_frozen_pages+0xbc4/0xd30 [ 150.234637][ T5834] vfree+0x25a/0x400 [ 150.236340][ T5834] kcov_close+0x28/0x50 [ 150.238270][ T5834] __fput+0x44c/0xa70 [ 150.240118][ T5834] task_work_run+0x1d4/0x260 [ 150.242332][ T5834] do_exit+0x6b5/0x2300 [ 150.244434][ T5834] do_group_exit+0x21c/0x2d0 [ 150.246470][ T5834] get_signal+0x1286/0x1340 [ 150.248700][ T5834] arch_do_signal_or_restart+0x9a/0x750 [ 150.251224][ T5834] exit_to_user_mode_loop+0x75/0x110 [ 150.253691][ T5834] do_syscall_64+0x2bd/0x3b0 [ 150.255831][ T5834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.258426][ T5834] [ 150.259558][ T5834] Memory state around the buggy address: [ 150.261982][ T5834] ffff88804dc49f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 150.265779][ T5834] ffff88804dc49f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 150.269506][ T5834] >ffff88804dc4a000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 150.273245][ T5834] ^ [ 150.275248][ T5834] ffff88804dc4a080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 150.279233][ T5834] ffff88804dc4a100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 150.282669][ T5834] ================================================================== [ 150.331330][ T5834] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 150.334619][ T5834] CPU: 0 UID: 0 PID: 5834 Comm: syz.0.16 Not tainted syzkaller #0 PREEMPT(full) [ 150.338651][ T5834] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 150.343586][ T5834] Call Trace: [ 150.345148][ T5834] [ 150.346489][ T5834] dump_stack_lvl+0x99/0x250 [ 150.348796][ T5834] ? __asan_memcpy+0x40/0x70 [ 150.351044][ T5834] ? __pfx_dump_stack_lvl+0x10/0x10 [ 150.353368][ T5834] ? __pfx__printk+0x10/0x10 [ 150.355691][ T5834] vpanic+0x281/0x750 [ 150.357587][ T5834] ? preempt_schedule+0xae/0xc0 [ 150.359930][ T5834] ? __pfx_vpanic+0x10/0x10 [ 150.362022][ T5834] ? preempt_schedule_common+0x83/0xd0 [ 150.364436][ T5834] ? preempt_schedule+0xae/0xc0 [ 150.366607][ T5834] ? __pfx_preempt_schedule+0x10/0x10 [ 150.368980][ T5834] panic+0xb9/0xc0 [ 150.370682][ T5834] ? __pfx_panic+0x10/0x10 [ 150.372711][ T5834] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 150.375315][ T5834] ? ocfs2_claim_suballoc_bits+0x8b2/0x2450 [ 150.377881][ T5834] check_panic_on_warn+0x89/0xb0 [ 150.380057][ T5834] ? ocfs2_claim_suballoc_bits+0x8b2/0x2450 [ 150.382690][ T5834] end_report+0x78/0x160 [ 150.384615][ T5834] kasan_report+0x129/0x150 [ 150.386688][ T5834] ? ocfs2_claim_suballoc_bits+0x8b2/0x2450 [ 150.389325][ T5834] ocfs2_claim_suballoc_bits+0x8b2/0x2450 [ 150.391967][ T5834] ? check_path+0x21/0x40 [ 150.393886][ T5834] ? __pfx_ocfs2_claim_suballoc_bits+0x10/0x10 [ 150.396858][ T5834] ? lockdep_unlock+0x89/0x120 [ 150.399119][ T5834] ? validate_chain+0x897/0x2140 [ 150.401313][ T5834] ? __lock_acquire+0xab9/0xd20 [ 150.403503][ T5834] ocfs2_claim_new_inode+0x332/0x7a0 [ 150.405801][ T5834] ? __pfx_ocfs2_claim_new_inode+0x10/0x10 [ 150.408689][ T5834] ? _raw_spin_lock_irq+0xae/0xf0 [ 150.410758][ T5834] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 150.413294][ T5834] ocfs2_mknod_locked+0x100/0x250 [ 150.415688][ T5834] ? __pfx_ocfs2_mknod_locked+0x10/0x10 [ 150.418193][ T5834] ? dquot_alloc_inode+0x216/0xa50 [ 150.420498][ T5834] ? ocfs2_block_signals+0x94/0xe0 [ 150.422818][ T5834] ? __pfx_ocfs2_block_signals+0x10/0x10 [ 150.425275][ T5834] ? ocfs2_init_security_get+0x9f/0x1a0 [ 150.427709][ T5834] ocfs2_mknod+0x10c7/0x2050 [ 150.429818][ T5834] ? __pfx_ocfs2_mknod+0x10/0x10 [ 150.432117][ T5834] ? __pfx_ocfs2_find_entry+0x10/0x10 [ 150.434473][ T5834] ? __lock_acquire+0xab9/0xd20 [ 150.436712][ T5834] ? look_up_lock_class+0x74/0x170 [ 150.438992][ T5834] ? register_lock_class+0x51/0x320 [ 150.441258][ T5834] ? __lock_acquire+0xab9/0xd20 [ 150.443461][ T5834] ? __lock_acquire+0xab9/0xd20 [ 150.445596][ T5834] ? do_raw_spin_lock+0x121/0x290 [ 150.448068][ T5834] ? do_raw_spin_unlock+0x4d/0x240 [ 150.450292][ T5834] ? rcu_is_watching+0x15/0xb0 [ 150.452686][ T5834] ? ocfs2_lookup+0x5b9/0x9b0 [ 150.454765][ T5834] ocfs2_create+0x1a5/0x440 [ 150.456891][ T5834] ? __pfx_ocfs2_lookup+0x10/0x10 [ 150.459148][ T5834] ? from_kgid+0x1b0/0x650 [ 150.461257][ T5834] ? __pfx_ocfs2_create+0x10/0x10 [ 150.463712][ T5834] ? HAS_UNMAPPED_ID+0x11a/0x180 [ 150.466296][ T5834] ? inode_permission+0x149/0x470 [ 150.468727][ T5834] ? __pfx_ocfs2_permission+0x10/0x10 [ 150.471162][ T5834] ? bpf_lsm_inode_create+0x9/0x20 [ 150.473550][ T5834] ? __pfx_ocfs2_create+0x10/0x10 [ 150.475861][ T5834] path_openat+0x14f1/0x3830 [ 150.478010][ T5834] ? arch_stack_walk+0xfc/0x150 [ 150.480157][ T5834] ? __pfx_path_openat+0x10/0x10 [ 150.482341][ T5834] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.485050][ T5834] do_filp_open+0x1fa/0x410 [ 150.487039][ T5834] ? __lock_acquire+0xab9/0xd20 [ 150.489212][ T5834] ? __pfx_do_filp_open+0x10/0x10 [ 150.491493][ T5834] ? _raw_spin_unlock+0x28/0x50 [ 150.493618][ T5834] ? alloc_fd+0x64c/0x6c0 [ 150.495481][ T5834] do_sys_openat2+0x121/0x1c0 [ 150.497573][ T5834] ? __se_sys_futex+0x36f/0x400 [ 150.499796][ T5834] ? __pfx_do_sys_openat2+0x10/0x10 [ 150.502092][ T5834] ? rcu_is_watching+0x15/0xb0 [ 150.504294][ T5834] __x64_sys_openat+0x138/0x170 [ 150.506425][ T5834] do_syscall_64+0xfa/0x3b0 [ 150.508498][ T5834] ? lockdep_hardirqs_on+0x9c/0x150 [ 150.510730][ T5834] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.513336][ T5834] ? clear_bhb_loop+0x60/0xb0 [ 150.515403][ T5834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.518023][ T5834] RIP: 0033:0x7f09c098d169 [ 150.520014][ T5834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.528420][ T5834] RSP: 002b:00007f09c172d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 150.531812][ T5834] RAX: ffffffffffffffda RBX: 00007f09c0ba5fa0 RCX: 00007f09c098d169 [ 150.535178][ T5834] RDX: 0000000000105042 RSI: 0000400000000080 RDI: ffffffffffffff9c [ 150.538380][ T5834] RBP: 00007f09c0a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 150.541404][ T5834] R10: 00000000000001db R11: 0000000000000246 R12: 0000000000000000 [ 150.544508][ T5834] R13: 0000000000000000 R14: 00007f09c0ba5fa0 R15: 00007fffe9bc40e8 [ 150.547500][ T5834] [ 150.549073][ T5834] Kernel Offset: disabled [ 150.550921][ T5834] Rebooting in 86400 seconds..