Warning: Permanently added '10.128.1.155' (ED25519) to the list of known hosts. 2025/03/18 16:31:43 ignoring optional flag "sandboxArg"="0" 2025/03/18 16:31:44 parsed 1 programs [ 113.519489][ T5842] cgroup: Unknown subsys name 'net' [ 113.656740][ T5842] cgroup: Unknown subsys name 'cpuset' [ 113.665931][ T5842] cgroup: Unknown subsys name 'rlimit' [ 115.230403][ T5842] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 118.103886][ T5855] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 119.630960][ T1107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.648539][ T1107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.666616][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.686844][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.052963][ T5903] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 120.066904][ T5903] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 120.077207][ T5903] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 120.085655][ T5903] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 120.099668][ T5903] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 120.108739][ T5903] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 121.465883][ T5928] chnl_net:caif_netlink_parms(): no params data found [ 121.524551][ T5928] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.531947][ T5928] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.540106][ T5928] bridge_slave_0: entered allmulticast mode [ 121.547699][ T5928] bridge_slave_0: entered promiscuous mode [ 121.557394][ T5928] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.564714][ T5928] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.572068][ T5928] bridge_slave_1: entered allmulticast mode [ 121.578825][ T5928] bridge_slave_1: entered promiscuous mode [ 121.605315][ T5928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.616652][ T5928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.644273][ T5928] team0: Port device team_slave_0 added [ 121.653050][ T5928] team0: Port device team_slave_1 added [ 121.679007][ T5928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.686231][ T5928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.713496][ T5928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.726516][ T5928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.733615][ T5928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.760037][ T5928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.795276][ T5928] hsr_slave_0: entered promiscuous mode [ 121.801613][ T5928] hsr_slave_1: entered promiscuous mode [ 121.913731][ T5928] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 121.925071][ T5928] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 121.936018][ T5928] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 121.946134][ T5928] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 122.014902][ T5928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.037568][ T5928] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.049823][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.057236][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.073981][ T4752] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.081253][ T4752] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.226909][ T5928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.262336][ T5928] veth0_vlan: entered promiscuous mode [ 122.274240][ T5928] veth1_vlan: entered promiscuous mode [ 122.299547][ T5928] veth0_macvtap: entered promiscuous mode [ 122.309955][ T5928] veth1_macvtap: entered promiscuous mode [ 122.328357][ T5928] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.344541][ T5928] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.356024][ T5928] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.366333][ T5928] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.375455][ T5928] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.384349][ T5928] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.568801][ T1163] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.639520][ T1163] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.677870][ T1163] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.773199][ T1163] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2025/03/18 16:31:57 executed programs: 0 [ 123.217429][ T5142] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 123.228639][ T5142] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 123.237680][ T5142] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 123.246797][ T5142] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 123.255295][ T5142] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 123.263649][ T5142] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 123.386637][ T5956] chnl_net:caif_netlink_parms(): no params data found [ 123.445098][ T5956] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.452920][ T5956] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.460437][ T5956] bridge_slave_0: entered allmulticast mode [ 123.469703][ T5956] bridge_slave_0: entered promiscuous mode [ 123.482413][ T5956] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.489652][ T5956] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.497459][ T5956] bridge_slave_1: entered allmulticast mode [ 123.504971][ T5956] bridge_slave_1: entered promiscuous mode [ 123.531555][ T5956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.545843][ T5956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.578596][ T5956] team0: Port device team_slave_0 added [ 123.586673][ T5956] team0: Port device team_slave_1 added [ 123.608926][ T5956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.616434][ T5956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.642794][ T5956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.655460][ T5956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.662893][ T5956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.690967][ T5956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.741536][ T5956] hsr_slave_0: entered promiscuous mode [ 123.748126][ T5956] hsr_slave_1: entered promiscuous mode [ 123.754800][ T5956] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 123.762931][ T5956] Cannot create hsr debugfs directory [ 125.303517][ T5142] Bluetooth: hci0: command tx timeout [ 125.722530][ T1163] bridge_slave_1: left allmulticast mode [ 125.728726][ T1163] bridge_slave_1: left promiscuous mode [ 125.739729][ T1163] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.751321][ T1163] bridge_slave_0: left allmulticast mode [ 125.758895][ T1163] bridge_slave_0: left promiscuous mode [ 125.764876][ T1163] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.024577][ T1163] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.035944][ T1163] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.046256][ T1163] bond0 (unregistering): Released all slaves [ 126.156474][ T1163] hsr_slave_0: left promiscuous mode [ 126.165067][ T1163] hsr_slave_1: left promiscuous mode [ 126.171251][ T1163] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.179053][ T1163] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.190520][ T1163] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.203294][ T1163] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.226007][ T1163] veth1_macvtap: left promiscuous mode [ 126.232573][ T1163] veth0_macvtap: left promiscuous mode [ 126.238333][ T1163] veth1_vlan: left promiscuous mode [ 126.244432][ T1163] veth0_vlan: left promiscuous mode [ 126.656182][ T1163] team0 (unregistering): Port device team_slave_1 removed [ 126.700175][ T1163] team0 (unregistering): Port device team_slave_0 removed [ 127.331349][ T5956] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 127.344861][ T5956] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 127.356603][ T5956] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 127.366995][ T5956] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 127.382521][ T5142] Bluetooth: hci0: command tx timeout [ 127.485777][ T5956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.505746][ T5956] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.590112][ T4752] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.597333][ T4752] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.641890][ T4752] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.649136][ T4752] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.910948][ T5956] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.957298][ T5956] veth0_vlan: entered promiscuous mode [ 127.971257][ T5956] veth1_vlan: entered promiscuous mode [ 128.003889][ T5956] veth0_macvtap: entered promiscuous mode [ 128.015387][ T5956] veth1_macvtap: entered promiscuous mode [ 128.038048][ T5956] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 128.057079][ T5956] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 128.070708][ T5956] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.082424][ T5956] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.091363][ T5956] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.102285][ T5956] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.192516][ T1107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.200501][ T1107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.230594][ T1107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 2025/03/18 16:32:02 executed programs: 2 [ 128.241771][ T1107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.514069][ T6011] loop0: detected capacity change from 0 to 32768 [ 128.521560][ T6011] ======================================================= [ 128.521560][ T6011] WARNING: The mand mount option has been deprecated and [ 128.521560][ T6011] and is ignored by this kernel. Remove the mand [ 128.521560][ T6011] option from the mount to silence this warning. [ 128.521560][ T6011] ======================================================= [ 128.590929][ T6011] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 128.611380][ T6011] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 128.628922][ T6011] ================================================================== [ 128.637039][ T6011] BUG: KASAN: slab-use-after-free in ocfs2_claim_suballoc_bits+0x10d3/0x2560 [ 128.645840][ T6011] Read of size 4 at addr ffff8880358f4000 by task syz.0.16/6011 [ 128.653583][ T6011] [ 128.656039][ T6011] CPU: 1 UID: 0 PID: 6011 Comm: syz.0.16 Not tainted 6.14.0-rc7-syzkaller-00067-g76b6905c11fd #0 [ 128.656057][ T6011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 128.656070][ T6011] Call Trace: [ 128.656076][ T6011] [ 128.656083][ T6011] dump_stack_lvl+0x241/0x360 [ 128.656103][ T6011] ? __pfx_dump_stack_lvl+0x10/0x10 [ 128.656117][ T6011] ? __pfx__printk+0x10/0x10 [ 128.656140][ T6011] ? _printk+0xd5/0x120 [ 128.656161][ T6011] ? __virt_addr_valid+0x183/0x530 [ 128.656183][ T6011] ? __virt_addr_valid+0x183/0x530 [ 128.656205][ T6011] print_report+0x16e/0x5b0 [ 128.656227][ T6011] ? __virt_addr_valid+0x183/0x530 [ 128.656250][ T6011] ? __virt_addr_valid+0x183/0x530 [ 128.656272][ T6011] ? __virt_addr_valid+0x45f/0x530 [ 128.656292][ T6011] ? __phys_addr+0xba/0x170 [ 128.656313][ T6011] ? ocfs2_claim_suballoc_bits+0x10d3/0x2560 [ 128.656331][ T6011] kasan_report+0x143/0x180 [ 128.656353][ T6011] ? ocfs2_claim_suballoc_bits+0x10d3/0x2560 [ 128.656372][ T6011] ocfs2_claim_suballoc_bits+0x10d3/0x2560 [ 128.656389][ T6011] ? mark_lock+0x9a/0x360 [ 128.656417][ T6011] ? __pfx_ocfs2_claim_suballoc_bits+0x10/0x10 [ 128.656442][ T6011] ? mark_lock+0x9a/0x360 [ 128.656464][ T6011] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 128.656519][ T6011] ocfs2_claim_new_inode+0x338/0x870 [ 128.656539][ T6011] ? __pfx_ocfs2_claim_new_inode+0x10/0x10 [ 128.656555][ T6011] ? __set_current_blocked+0x310/0x380 [ 128.656574][ T6011] ? __pfx___set_current_blocked+0x10/0x10 [ 128.656591][ T6011] ? rcu_is_watching+0x15/0xb0 [ 128.656608][ T6011] ocfs2_mknod_locked+0x17a/0x3b0 [ 128.656624][ T6011] ? __pfx_sigprocmask+0x10/0x10 [ 128.656640][ T6011] ? __pfx_ocfs2_mknod_locked+0x10/0x10 [ 128.656654][ T6011] ? ocfs2_start_trans+0x4e3/0x700 [ 128.656673][ T6011] ? __pfx_ocfs2_block_signals+0x10/0x10 [ 128.656697][ T6011] ? ocfs2_init_security_get+0x9e/0x1a0 [ 128.656717][ T6011] ocfs2_mknod+0x17d4/0x2b30 [ 128.656730][ T6011] ? __pfx_validate_chain+0x10/0x10 [ 128.656750][ T6011] ? __pfx_ocfs2_mknod+0x10/0x10 [ 128.656771][ T6011] ? __lock_acquire+0x1397/0x2100 [ 128.656800][ T6011] ? __pfx_lock_acquire+0x10/0x10 [ 128.656820][ T6011] ? ocfs2_inode_unlock+0xa7/0x150 [ 128.656835][ T6011] ? __pfx_lock_release+0x10/0x10 [ 128.656854][ T6011] ? do_raw_spin_lock+0x14f/0x370 [ 128.656873][ T6011] ? do_raw_spin_unlock+0x13c/0x8b0 [ 128.656892][ T6011] ? _raw_spin_unlock+0x28/0x50 [ 128.656911][ T6011] ? rcu_is_watching+0x15/0xb0 [ 128.656926][ T6011] ? ocfs2_lookup+0x503/0xa30 [ 128.656950][ T6011] ocfs2_create+0x1ab/0x470 [ 128.656974][ T6011] ? __pfx_ocfs2_create+0x10/0x10 [ 128.656997][ T6011] ? bpf_lsm_inode_create+0x9/0x10 [ 128.657012][ T6011] ? security_inode_create+0xbe/0x340 [ 128.657033][ T6011] ? __pfx_ocfs2_create+0x10/0x10 [ 128.657055][ T6011] path_openat+0x193c/0x3590 [ 128.657084][ T6011] ? __pfx_path_openat+0x10/0x10 [ 128.657109][ T6011] do_filp_open+0x27f/0x4e0 [ 128.657127][ T6011] ? __pfx_do_filp_open+0x10/0x10 [ 128.657146][ T6011] ? do_raw_spin_lock+0x14f/0x370 [ 128.657175][ T6011] do_sys_openat2+0x13e/0x1d0 [ 128.657191][ T6011] ? __pfx_do_sys_openat2+0x10/0x10 [ 128.657205][ T6011] ? count_memcg_event_mm+0x3c2/0x420 [ 128.657221][ T6011] ? count_memcg_event_mm+0x94/0x420 [ 128.657239][ T6011] __x64_sys_openat+0x247/0x2a0 [ 128.657255][ T6011] ? __pfx___x64_sys_openat+0x10/0x10 [ 128.657271][ T6011] ? do_syscall_64+0x100/0x230 [ 128.657295][ T6011] ? do_syscall_64+0xb6/0x230 [ 128.657318][ T6011] do_syscall_64+0xf3/0x230 [ 128.657340][ T6011] ? clear_bhb_loop+0x35/0x90 [ 128.657362][ T6011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.657389][ T6011] RIP: 0033:0x7fbfded8d169 [ 128.657405][ T6011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.657417][ T6011] RSP: 002b:00007ffd97fd1ca8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 128.657433][ T6011] RAX: ffffffffffffffda RBX: 00007fbfdefa5fa0 RCX: 00007fbfded8d169 [ 128.657445][ T6011] RDX: 0000000000105042 RSI: 0000400000000080 RDI: ffffffffffffff9c [ 128.657455][ T6011] RBP: 00007fbfdee0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 128.657464][ T6011] R10: 00000000000001db R11: 0000000000000246 R12: 0000000000000000 [ 128.657473][ T6011] R13: 00007fbfdefa5fa0 R14: 00007fbfdefa5fa0 R15: 0000000000000004 [ 128.657492][ T6011] [ 128.657498][ T6011] [ 129.085796][ T6011] Allocated by task 5882: [ 129.090213][ T6011] kasan_save_track+0x3f/0x80 [ 129.094906][ T6011] __kasan_kmalloc+0x98/0xb0 [ 129.099609][ T6011] __kmalloc_node_noprof+0x290/0x4d0 [ 129.105514][ T6011] __kvmalloc_node_noprof+0x72/0x190 [ 129.110994][ T6011] nf_hook_entries_grow+0x288/0x720 [ 129.116291][ T6011] __nf_register_net_hook+0x278/0x8d0 [ 129.121669][ T6011] nf_register_net_hook+0xb0/0x190 [ 129.126965][ T6011] nf_register_net_hooks+0x41/0x1a0 [ 129.132171][ T6011] nf_nat_register_fn+0x3ae/0x570 [ 129.137212][ T6011] iptable_nat_table_init+0xd4/0x2d0 [ 129.142503][ T6011] xt_find_table_lock+0x322/0x400 [ 129.147542][ T6011] xt_request_find_table_lock+0x26/0x100 [ 129.153486][ T6011] do_ipt_get_ctl+0x890/0x18b0 [ 129.158256][ T6011] nf_getsockopt+0x299/0x2c0 [ 129.162871][ T6011] ip_getsockopt+0x222/0x2e0 [ 129.167556][ T6011] tcp_getsockopt+0x163/0x1c0 [ 129.172250][ T6011] do_sock_getsockopt+0x38e/0x740 [ 129.177280][ T6011] __x64_sys_getsockopt+0x2a1/0x370 [ 129.182603][ T6011] do_syscall_64+0xf3/0x230 [ 129.187122][ T6011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.193564][ T6011] [ 129.195890][ T6011] Freed by task 17: [ 129.199782][ T6011] kasan_save_track+0x3f/0x80 [ 129.204471][ T6011] kasan_save_free_info+0x40/0x50 [ 129.209598][ T6011] __kasan_slab_free+0x59/0x70 [ 129.214378][ T6011] kfree+0x196/0x430 [ 129.218298][ T6011] rcu_core+0xaaa/0x17a0 [ 129.222559][ T6011] handle_softirqs+0x2d4/0x9b0 [ 129.227422][ T6011] run_ksoftirqd+0xca/0x130 [ 129.231990][ T6011] smpboot_thread_fn+0x544/0xa30 [ 129.236944][ T6011] kthread+0x7a9/0x920 [ 129.241025][ T6011] ret_from_fork+0x4b/0x80 [ 129.245449][ T6011] ret_from_fork_asm+0x1a/0x30 [ 129.250311][ T6011] [ 129.252662][ T6011] Last potentially related work creation: [ 129.258377][ T6011] kasan_save_stack+0x3f/0x60 [ 129.263074][ T6011] kasan_record_aux_stack+0xaa/0xc0 [ 129.268308][ T6011] call_rcu+0x168/0xac0 [ 129.272484][ T6011] __nf_register_net_hook+0x71e/0x8d0 [ 129.277865][ T6011] nf_register_net_hook+0xb0/0x190 [ 129.282988][ T6011] nf_register_net_hooks+0x41/0x1a0 [ 129.288198][ T6011] ipt_register_table+0x4a2/0x740 [ 129.293314][ T6011] iptable_mangle_table_init+0x42/0x70 [ 129.298780][ T6011] xt_find_table_lock+0x322/0x400 [ 129.303908][ T6011] xt_request_find_table_lock+0x26/0x100 [ 129.309555][ T6011] do_ipt_get_ctl+0x890/0x18b0 [ 129.314414][ T6011] nf_getsockopt+0x299/0x2c0 [ 129.319014][ T6011] ip_getsockopt+0x222/0x2e0 [ 129.323906][ T6011] tcp_getsockopt+0x163/0x1c0 [ 129.328601][ T6011] do_sock_getsockopt+0x38e/0x740 [ 129.333633][ T6011] __x64_sys_getsockopt+0x2a1/0x370 [ 129.339097][ T6011] do_syscall_64+0xf3/0x230 [ 129.343615][ T6011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.349525][ T6011] [ 129.351854][ T6011] The buggy address belongs to the object at ffff8880358f4000 [ 129.351854][ T6011] which belongs to the cache kmalloc-cg-64 of size 64 [ 129.366105][ T6011] The buggy address is located 0 bytes inside of [ 129.366105][ T6011] freed 64-byte region [ffff8880358f4000, ffff8880358f4040) [ 129.379881][ T6011] [ 129.382247][ T6011] The buggy address belongs to the physical page: [ 129.388761][ T6011] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x358f4 [ 129.397655][ T6011] memcg:ffff888033ef2001 [ 129.401947][ T6011] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 129.409235][ T6011] page_type: f5(slab) [ 129.413437][ T6011] raw: 00fff00000000000 ffff88801b04dc80 dead000000000122 0000000000000000 [ 129.422398][ T6011] raw: 0000000000000000 0000000000200020 00000000f5000000 ffff888033ef2001 [ 129.431195][ T6011] page dumped because: kasan: bad access detected [ 129.437629][ T6011] page_owner tracks the page as allocated [ 129.443489][ T6011] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5882, tgid 5882 (syz-executor), ts 119351099936, free_ts 119350907007 [ 129.463097][ T6011] post_alloc_hook+0x1f4/0x240 [ 129.467889][ T6011] get_page_from_freelist+0x3651/0x37a0 [ 129.473622][ T6011] __alloc_frozen_pages_noprof+0x292/0x710 [ 129.479489][ T6011] alloc_pages_mpol+0x311/0x660 [ 129.484355][ T6011] allocate_slab+0x8f/0x3a0 [ 129.488922][ T6011] ___slab_alloc+0xc27/0x14a0 [ 129.493617][ T6011] __slab_alloc+0x58/0xa0 [ 129.498221][ T6011] __kmalloc_node_noprof+0x2ee/0x4d0 [ 129.503601][ T6011] __kvmalloc_node_noprof+0x72/0x190 [ 129.509073][ T6011] nf_hook_entries_grow+0x288/0x720 [ 129.514373][ T6011] __nf_register_net_hook+0x278/0x8d0 [ 129.519933][ T6011] nf_register_net_hook+0xb0/0x190 [ 129.525291][ T6011] nf_register_net_hooks+0x41/0x1a0 [ 129.530764][ T6011] nf_nat_register_fn+0x3ae/0x570 [ 129.535813][ T6011] iptable_nat_table_init+0xd4/0x2d0 [ 129.541124][ T6011] xt_find_table_lock+0x322/0x400 [ 129.546345][ T6011] page last free pid 5882 tgid 5882 stack trace: [ 129.552953][ T6011] free_frozen_pages+0xe04/0x10e0 [ 129.558169][ T6011] vfree+0x1c3/0x360 [ 129.562087][ T6011] do_ipt_get_ctl+0x1238/0x18b0 [ 129.567119][ T6011] nf_getsockopt+0x299/0x2c0 [ 129.571805][ T6011] ip_getsockopt+0x222/0x2e0 [ 129.576403][ T6011] tcp_getsockopt+0x163/0x1c0 [ 129.581097][ T6011] do_sock_getsockopt+0x38e/0x740 [ 129.586130][ T6011] __x64_sys_getsockopt+0x2a1/0x370 [ 129.591480][ T6011] do_syscall_64+0xf3/0x230 [ 129.596035][ T6011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.601991][ T6011] [ 129.604350][ T6011] Memory state around the buggy address: [ 129.610543][ T6011] ffff8880358f3f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 129.618789][ T6011] ffff8880358f3f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 129.627000][ T6011] >ffff8880358f4000: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 129.635124][ T6011] ^ [ 129.639195][ T6011] ffff8880358f4080: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 129.647358][ T6011] ffff8880358f4100: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 129.655431][ T6011] ================================================================== [ 129.682539][ T5142] Bluetooth: hci0: command tx timeout [ 129.696981][ T6011] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 129.704514][ T6011] CPU: 0 UID: 0 PID: 6011 Comm: syz.0.16 Not tainted 6.14.0-rc7-syzkaller-00067-g76b6905c11fd #0 [ 129.715534][ T6011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 129.726770][ T6011] Call Trace: [ 129.730171][ T6011] [ 129.733126][ T6011] dump_stack_lvl+0x241/0x360 [ 129.737930][ T6011] ? __pfx_dump_stack_lvl+0x10/0x10 [ 129.743367][ T6011] ? __pfx__printk+0x10/0x10 [ 129.748136][ T6011] ? preempt_schedule+0xe1/0xf0 [ 129.753121][ T6011] ? vscnprintf+0x5d/0x90 [ 129.757487][ T6011] panic+0x349/0x880 [ 129.761561][ T6011] ? check_panic_on_warn+0x21/0xb0 [ 129.766734][ T6011] ? __pfx_panic+0x10/0x10 [ 129.771201][ T6011] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 129.777199][ T6011] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 129.783545][ T6011] ? print_report+0x519/0x5b0 [ 129.788234][ T6011] check_panic_on_warn+0x86/0xb0 [ 129.793508][ T6011] ? ocfs2_claim_suballoc_bits+0x10d3/0x2560 [ 129.799673][ T6011] end_report+0x77/0x160 [ 129.804114][ T6011] kasan_report+0x154/0x180 [ 129.808651][ T6011] ? ocfs2_claim_suballoc_bits+0x10d3/0x2560 [ 129.814655][ T6011] ocfs2_claim_suballoc_bits+0x10d3/0x2560 [ 129.820505][ T6011] ? mark_lock+0x9a/0x360 [ 129.824859][ T6011] ? __pfx_ocfs2_claim_suballoc_bits+0x10/0x10 [ 129.831053][ T6011] ? mark_lock+0x9a/0x360 [ 129.835465][ T6011] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 129.841458][ T6011] ocfs2_claim_new_inode+0x338/0x870 [ 129.846773][ T6011] ? __pfx_ocfs2_claim_new_inode+0x10/0x10 [ 129.852592][ T6011] ? __set_current_blocked+0x310/0x380 [ 129.858088][ T6011] ? __pfx___set_current_blocked+0x10/0x10 [ 129.863902][ T6011] ? rcu_is_watching+0x15/0xb0 [ 129.868781][ T6011] ocfs2_mknod_locked+0x17a/0x3b0 [ 129.873928][ T6011] ? __pfx_sigprocmask+0x10/0x10 [ 129.878880][ T6011] ? __pfx_ocfs2_mknod_locked+0x10/0x10 [ 129.884535][ T6011] ? ocfs2_start_trans+0x4e3/0x700 [ 129.889823][ T6011] ? __pfx_ocfs2_block_signals+0x10/0x10 [ 129.895487][ T6011] ? ocfs2_init_security_get+0x9e/0x1a0 [ 129.901048][ T6011] ocfs2_mknod+0x17d4/0x2b30 [ 129.905659][ T6011] ? __pfx_validate_chain+0x10/0x10 [ 129.910894][ T6011] ? __pfx_ocfs2_mknod+0x10/0x10 [ 129.915940][ T6011] ? __lock_acquire+0x1397/0x2100 [ 129.921079][ T6011] ? __pfx_lock_acquire+0x10/0x10 [ 129.926114][ T6011] ? ocfs2_inode_unlock+0xa7/0x150 [ 129.931510][ T6011] ? __pfx_lock_release+0x10/0x10 [ 129.936580][ T6011] ? do_raw_spin_lock+0x14f/0x370 [ 129.942063][ T6011] ? do_raw_spin_unlock+0x13c/0x8b0 [ 129.947302][ T6011] ? _raw_spin_unlock+0x28/0x50 [ 129.952554][ T6011] ? rcu_is_watching+0x15/0xb0 [ 129.957365][ T6011] ? ocfs2_lookup+0x503/0xa30 [ 129.962082][ T6011] ocfs2_create+0x1ab/0x470 [ 129.966814][ T6011] ? __pfx_ocfs2_create+0x10/0x10 [ 129.971979][ T6011] ? bpf_lsm_inode_create+0x9/0x10 [ 129.977398][ T6011] ? security_inode_create+0xbe/0x340 [ 129.982921][ T6011] ? __pfx_ocfs2_create+0x10/0x10 [ 129.987994][ T6011] path_openat+0x193c/0x3590 [ 129.992738][ T6011] ? __pfx_path_openat+0x10/0x10 [ 129.997726][ T6011] do_filp_open+0x27f/0x4e0 [ 130.002447][ T6011] ? __pfx_do_filp_open+0x10/0x10 [ 130.007607][ T6011] ? do_raw_spin_lock+0x14f/0x370 [ 130.012783][ T6011] do_sys_openat2+0x13e/0x1d0 [ 130.017494][ T6011] ? __pfx_do_sys_openat2+0x10/0x10 [ 130.022721][ T6011] ? count_memcg_event_mm+0x3c2/0x420 [ 130.028125][ T6011] ? count_memcg_event_mm+0x94/0x420 [ 130.033757][ T6011] __x64_sys_openat+0x247/0x2a0 [ 130.038638][ T6011] ? __pfx___x64_sys_openat+0x10/0x10 [ 130.044037][ T6011] ? do_syscall_64+0x100/0x230 [ 130.048838][ T6011] ? do_syscall_64+0xb6/0x230 [ 130.053551][ T6011] do_syscall_64+0xf3/0x230 [ 130.058264][ T6011] ? clear_bhb_loop+0x35/0x90 [ 130.062984][ T6011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.069448][ T6011] RIP: 0033:0x7fbfded8d169 [ 130.073892][ T6011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.093531][ T6011] RSP: 002b:00007ffd97fd1ca8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 130.102050][ T6011] RAX: ffffffffffffffda RBX: 00007fbfdefa5fa0 RCX: 00007fbfded8d169 [ 130.110052][ T6011] RDX: 0000000000105042 RSI: 0000400000000080 RDI: ffffffffffffff9c [ 130.118054][ T6011] RBP: 00007fbfdee0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 130.126037][ T6011] R10: 00000000000001db R11: 0000000000000246 R12: 0000000000000000 [ 130.134022][ T6011] R13: 00007fbfdefa5fa0 R14: 00007fbfdefa5fa0 R15: 0000000000000004 [ 130.142035][ T6011] [ 130.145416][ T6011] Kernel Offset: disabled [ 130.149748][ T6011] Rebooting in 86400 seconds..