Warning: Permanently added '10.128.1.135' (ED25519) to the list of known hosts. 2025/01/04 21:12:39 ignoring optional flag "sandboxArg"="0" 2025/01/04 21:12:40 parsed 1 programs syzkaller login: [ 65.741646][ T5824] cgroup: Unknown subsys name 'net' [ 65.885911][ T5824] cgroup: Unknown subsys name 'cpuset' [ 65.893655][ T5824] cgroup: Unknown subsys name 'rlimit' [ 66.948046][ T5824] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.237238][ T5838] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 69.799325][ T5871] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.814168][ T5871] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.821514][ T5871] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.831448][ T5871] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.864433][ T5871] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 69.871723][ T5871] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.084253][ T5864] chnl_net:caif_netlink_parms(): no params data found [ 70.460014][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.468589][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.502659][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.509920][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.518280][ T5864] bridge_slave_0: entered allmulticast mode [ 70.525157][ T5864] bridge_slave_0: entered promiscuous mode [ 70.533706][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.541567][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.549009][ T5864] bridge_slave_1: entered allmulticast mode [ 70.555632][ T5864] bridge_slave_1: entered promiscuous mode [ 70.574241][ T964] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.582224][ T964] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.604435][ T5864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.620201][ T5864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.646971][ T5864] team0: Port device team_slave_0 added [ 70.654584][ T5864] team0: Port device team_slave_1 added [ 70.686675][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.694409][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.720886][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.737419][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.744817][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.771125][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.845919][ T5864] hsr_slave_0: entered promiscuous mode [ 70.862385][ T5864] hsr_slave_1: entered promiscuous mode [ 71.066857][ T5864] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.080933][ T5864] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.090015][ T5864] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.099332][ T5864] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.181818][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.203551][ T5864] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.215483][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.222604][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.234179][ T246] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.241895][ T246] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.320652][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.346260][ T5864] veth0_vlan: entered promiscuous mode [ 71.355605][ T5864] veth1_vlan: entered promiscuous mode [ 71.372782][ T5864] veth0_macvtap: entered promiscuous mode [ 71.380854][ T5864] veth1_macvtap: entered promiscuous mode [ 71.393144][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.405120][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1 2025/01/04 21:12:48 executed programs: 0 [ 71.416469][ T5864] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.425582][ T5864] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.434411][ T5864] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.443500][ T5864] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.545908][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.575275][ T5932] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.583268][ T5933] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.592551][ T5934] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.600255][ T5934] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.609634][ T5933] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.616732][ T5935] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.617099][ T5934] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.626363][ T5933] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 71.632031][ T5934] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.641734][ T5933] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.646253][ T5934] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.656221][ T5933] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 71.665971][ T5934] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.667642][ T5933] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 71.673300][ T5934] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.688074][ T5934] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.688581][ T5933] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.695465][ T5934] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 71.707244][ T5933] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 71.709842][ T5934] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.717046][ T5933] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.723816][ T5934] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 71.746810][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.747558][ T5934] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.766357][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 71.782582][ T5933] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 71.794422][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.805349][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 71.812643][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 71.936080][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.942404][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.993015][ T5927] chnl_net:caif_netlink_parms(): no params data found [ 72.106855][ T5923] chnl_net:caif_netlink_parms(): no params data found [ 72.154492][ T5924] chnl_net:caif_netlink_parms(): no params data found [ 72.163272][ T5927] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.170811][ T5927] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.178339][ T5927] bridge_slave_0: entered allmulticast mode [ 72.185318][ T5927] bridge_slave_0: entered promiscuous mode [ 72.220489][ T5927] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.228124][ T5927] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.235632][ T5927] bridge_slave_1: entered allmulticast mode [ 72.242248][ T5927] bridge_slave_1: entered promiscuous mode [ 72.314420][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.357901][ T5927] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.380632][ T5924] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.388197][ T5924] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.395679][ T5924] bridge_slave_0: entered allmulticast mode [ 72.402392][ T5924] bridge_slave_0: entered promiscuous mode [ 72.411676][ T5924] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.419086][ T5924] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.426675][ T5924] bridge_slave_1: entered allmulticast mode [ 72.434076][ T5924] bridge_slave_1: entered promiscuous mode [ 72.441735][ T5927] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.461334][ T5926] chnl_net:caif_netlink_parms(): no params data found [ 72.470760][ T5937] chnl_net:caif_netlink_parms(): no params data found [ 72.489924][ T5923] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.497728][ T5923] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.506152][ T5923] bridge_slave_0: entered allmulticast mode [ 72.512592][ T5923] bridge_slave_0: entered promiscuous mode [ 72.531330][ T5927] team0: Port device team_slave_0 added [ 72.538861][ T5927] team0: Port device team_slave_1 added [ 72.544882][ T5923] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.552015][ T5923] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.559572][ T5923] bridge_slave_1: entered allmulticast mode [ 72.566396][ T5923] bridge_slave_1: entered promiscuous mode [ 72.587208][ T5924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.598759][ T5924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.656374][ T5927] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.663358][ T5927] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.690106][ T5927] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.702961][ T5927] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.710172][ T5927] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.736215][ T5927] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.748575][ T5923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.759778][ T5923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.777489][ T5924] team0: Port device team_slave_0 added [ 72.792789][ T5926] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.800160][ T5926] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.807615][ T5926] bridge_slave_0: entered allmulticast mode [ 72.815089][ T5926] bridge_slave_0: entered promiscuous mode [ 72.822252][ T5926] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.829727][ T5926] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.837246][ T5926] bridge_slave_1: entered allmulticast mode [ 72.843643][ T5926] bridge_slave_1: entered promiscuous mode [ 72.871599][ T5924] team0: Port device team_slave_1 added [ 72.890628][ T5923] team0: Port device team_slave_0 added [ 72.898657][ T5923] team0: Port device team_slave_1 added [ 72.904595][ T5937] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.912493][ T5937] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.920298][ T5937] bridge_slave_0: entered allmulticast mode [ 72.927186][ T5937] bridge_slave_0: entered promiscuous mode [ 72.935310][ T5937] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.942406][ T5937] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.949766][ T5937] bridge_slave_1: entered allmulticast mode [ 72.956770][ T5937] bridge_slave_1: entered promiscuous mode [ 72.992646][ T5924] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.000578][ T5924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.026985][ T5924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.046377][ T5927] hsr_slave_0: entered promiscuous mode [ 73.052462][ T5927] hsr_slave_1: entered promiscuous mode [ 73.058661][ T5927] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.066338][ T5927] Cannot create hsr debugfs directory [ 73.073388][ T5926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.093123][ T5924] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.100170][ T5924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.126190][ T5924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.149330][ T5926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.159740][ T5923] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.167170][ T5923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.193585][ T5923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.205821][ T5923] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.212922][ T5923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.239329][ T5923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.251609][ T5937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.263976][ T5937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.287021][ T5937] team0: Port device team_slave_0 added [ 73.318209][ T5926] team0: Port device team_slave_0 added [ 73.330799][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.343213][ T5937] team0: Port device team_slave_1 added [ 73.354708][ T5926] team0: Port device team_slave_1 added [ 73.367462][ T5924] hsr_slave_0: entered promiscuous mode [ 73.373637][ T5924] hsr_slave_1: entered promiscuous mode [ 73.380325][ T5924] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.388068][ T5924] Cannot create hsr debugfs directory [ 73.429584][ T5926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.436809][ T5926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.462903][ T5926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.480571][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.487970][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.514361][ T5937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.529906][ T5923] hsr_slave_0: entered promiscuous mode [ 73.536349][ T5923] hsr_slave_1: entered promiscuous mode [ 73.542405][ T5923] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.550527][ T5923] Cannot create hsr debugfs directory [ 73.563046][ T5926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.570293][ T5926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.596945][ T5926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.613138][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.620357][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.646323][ T5937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.728632][ T5926] hsr_slave_0: entered promiscuous mode [ 73.735585][ T5926] hsr_slave_1: entered promiscuous mode [ 73.741566][ T5926] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.749273][ T5926] Cannot create hsr debugfs directory [ 73.762239][ T5937] hsr_slave_0: entered promiscuous mode [ 73.769540][ T5937] hsr_slave_1: entered promiscuous mode [ 73.775218][ T5936] Bluetooth: hci1: command tx timeout [ 73.780693][ T5937] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.788383][ T5936] Bluetooth: hci0: command tx timeout [ 73.794568][ T5937] Cannot create hsr debugfs directory [ 73.811762][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.854346][ T5936] Bluetooth: hci3: command tx timeout [ 73.861276][ T5936] Bluetooth: hci2: command tx timeout [ 73.868269][ T5933] Bluetooth: hci4: command tx timeout [ 73.896318][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.811923][ T35] bridge_slave_1: left allmulticast mode [ 74.820934][ T35] bridge_slave_1: left promiscuous mode [ 74.827800][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.839185][ T35] bridge_slave_0: left allmulticast mode [ 74.845959][ T35] bridge_slave_0: left promiscuous mode [ 74.851762][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.034348][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 75.044624][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 75.054554][ T35] bond0 (unregistering): Released all slaves [ 75.276937][ T35] hsr_slave_0: left promiscuous mode [ 75.282879][ T35] hsr_slave_1: left promiscuous mode [ 75.289126][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.297313][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.307460][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.315062][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.324182][ T35] veth1_macvtap: left promiscuous mode [ 75.329734][ T35] veth0_macvtap: left promiscuous mode [ 75.335314][ T35] veth1_vlan: left promiscuous mode [ 75.340570][ T35] veth0_vlan: left promiscuous mode [ 75.422594][ T35] team0 (unregistering): Port device team_slave_1 removed [ 75.440071][ T35] team0 (unregistering): Port device team_slave_0 removed [ 75.519800][ T5927] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 75.532657][ T5927] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 75.549401][ T5927] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 75.566520][ T5924] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.577585][ T5927] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 75.589313][ T5924] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.600128][ T5924] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.619862][ T5924] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.630287][ T5937] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 75.643930][ T5937] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 75.671793][ T5937] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 75.690058][ T5937] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 75.738609][ T5923] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.769082][ T5923] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.793556][ T5923] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.824378][ T5923] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.842193][ T5927] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.854873][ T5933] Bluetooth: hci1: command tx timeout [ 75.860416][ T5936] Bluetooth: hci0: command tx timeout [ 75.876420][ T5926] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.916162][ T5926] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.928379][ T5926] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 75.935668][ T5936] Bluetooth: hci2: command tx timeout [ 75.941117][ T5933] Bluetooth: hci4: command tx timeout [ 75.941124][ T54] Bluetooth: hci3: command tx timeout [ 75.968235][ T5926] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 75.996604][ T5924] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.020361][ T5927] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.033168][ T5937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.057933][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.065060][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.105279][ T5924] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.118373][ T5937] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.131642][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.138802][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.161476][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.168665][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.201251][ T246] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.209065][ T246] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.219284][ T246] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.226720][ T246] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.236703][ T246] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.243879][ T246] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.293414][ T5923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.326367][ T5926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.356711][ T5923] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.393154][ T5926] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.416084][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.423301][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.443259][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.450421][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.492927][ T5923] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 76.508260][ T5923] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.545733][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.552859][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.587018][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.594175][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.643026][ T5937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.692147][ T5927] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.709050][ T5924] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.821950][ T5924] veth0_vlan: entered promiscuous mode [ 76.847611][ T5924] veth1_vlan: entered promiscuous mode [ 76.866074][ T5927] veth0_vlan: entered promiscuous mode [ 76.908371][ T5927] veth1_vlan: entered promiscuous mode [ 76.924028][ T5924] veth0_macvtap: entered promiscuous mode [ 76.942981][ T5924] veth1_macvtap: entered promiscuous mode [ 76.965146][ T5924] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.975409][ T5923] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.985714][ T5927] veth0_macvtap: entered promiscuous mode [ 76.998137][ T5924] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.010063][ T5926] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.022612][ T5924] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.031704][ T5924] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.041068][ T5924] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.049988][ T5924] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.065959][ T5927] veth1_macvtap: entered promiscuous mode [ 77.095003][ T5937] veth0_vlan: entered promiscuous mode [ 77.105002][ T5927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.117482][ T5927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.128286][ T5927] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.143241][ T5937] veth1_vlan: entered promiscuous mode [ 77.162168][ T5926] veth0_vlan: entered promiscuous mode [ 77.180197][ T5927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.191829][ T5927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.202764][ T5927] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.212759][ T5927] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.222181][ T5927] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.231027][ T5927] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.239903][ T5927] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.254195][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.262101][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.284949][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.285594][ T5926] veth1_vlan: entered promiscuous mode [ 77.295696][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.311750][ T5923] veth0_vlan: entered promiscuous mode 2025/01/04 21:12:54 executed programs: 10 [ 77.346494][ T5923] veth1_vlan: entered promiscuous mode [ 77.358253][ T5926] veth0_macvtap: entered promiscuous mode [ 77.370512][ T5937] veth0_macvtap: entered promiscuous mode [ 77.382055][ T6068] loop0: detected capacity change from 0 to 512 [ 77.390078][ T6068] EXT4-fs: Ignoring removed mblk_io_submit option [ 77.399186][ T6068] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 77.407834][ T5937] veth1_macvtap: entered promiscuous mode [ 77.419688][ T6068] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002] [ 77.430040][ T6068] System zones: 1-12 [ 77.431249][ T5926] veth1_macvtap: entered promiscuous mode [ 77.440618][ T6068] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.16: corrupted in-inode xattr: e_value size too large [ 77.458730][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.469176][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.476188][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.483811][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.487686][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.495570][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.504855][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.522709][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.533719][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.543138][ T6068] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.16: couldn't read orphan inode 15 (err -117) [ 77.553561][ T5923] veth0_macvtap: entered promiscuous mode [ 77.563190][ T6068] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.588970][ T5926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.599866][ T5926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.604601][ T6068] EXT4-fs warning (device loop0): dx_probe:833: inode #2: comm syz.0.16: Unrecognised inode hash code 4 [ 77.609932][ T5926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.632013][ T5926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.642024][ T5926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.642498][ T6068] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.16: Corrupt directory, running e2fsck is recommended [ 77.652763][ T5926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.653611][ T5926] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.686363][ T6068] EXT4-fs warning (device loop0): dx_probe:833: inode #2: comm syz.0.16: Unrecognised inode hash code 4 [ 77.688651][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.698926][ T6068] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.16: Corrupt directory, running e2fsck is recommended [ 77.708421][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.721154][ T6068] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 255: comm syz.0.16: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=1023, inode=0, rec_len=0, size=1024 fake=0 [ 77.730759][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.730776][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.774075][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.783293][ T5923] veth1_macvtap: entered promiscuous mode [ 77.797143][ T5923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.807929][ T5923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.817770][ T5923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.828225][ T5923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.838126][ T5923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.848633][ T5923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.858666][ T5923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.869195][ T5923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.881099][ T5923] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.901439][ T5924] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.912831][ T5926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.921446][ T6072] loop3: detected capacity change from 0 to 512 [ 77.924118][ T5926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.940546][ T6072] EXT4-fs: Ignoring removed mblk_io_submit option [ 77.950408][ T5933] Bluetooth: hci0: command tx timeout [ 77.956179][ T5933] Bluetooth: hci1: command tx timeout [ 77.972017][ T6074] loop0: detected capacity change from 0 to 512 [ 77.974710][ T6072] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 77.978840][ T5926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.998159][ T6074] EXT4-fs: Ignoring removed mblk_io_submit option [ 78.005343][ T6074] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 78.005404][ T5926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.015111][ T5936] Bluetooth: hci4: command tx timeout [ 78.027096][ T5926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.028837][ T5933] Bluetooth: hci2: command tx timeout [ 78.041649][ T5936] Bluetooth: hci3: command tx timeout [ 78.044766][ T5926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.060657][ T5926] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.062733][ T6072] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002] [ 78.070708][ T5937] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.085416][ T5937] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.088116][ T6072] System zones: [ 78.096064][ T5937] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.099070][ T6072] 1-12 [ 78.099753][ T6074] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002] [ 78.111106][ T6072] [ 78.111969][ T5937] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.131348][ T6074] System zones: 1-12 [ 78.136656][ T6072] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.19: corrupted in-inode xattr: e_value size too large [ 78.140490][ T5923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.150804][ T6074] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.21: corrupted in-inode xattr: e_value size too large [ 78.161222][ T5923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.177329][ T6074] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.21: couldn't read orphan inode 15 (err -117) [ 78.185114][ T5923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.207610][ T5923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.217548][ T5923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.218327][ T6072] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.19: couldn't read orphan inode 15 (err -117) [ 78.228046][ T5923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.242337][ T6072] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.249741][ T5923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.249756][ T5923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.273335][ T6074] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.283018][ T5923] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.305751][ T6074] EXT4-fs warning (device loop0): dx_probe:833: inode #2: comm syz.0.21: Unrecognised inode hash code 4 [ 78.322159][ T6072] EXT4-fs warning (device loop3): dx_probe:833: inode #2: comm syz.3.19: Unrecognised inode hash code 4 [ 78.337924][ T5926] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.347950][ T6074] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.21: Corrupt directory, running e2fsck is recommended [ 78.350344][ T6072] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.19: Corrupt directory, running e2fsck is recommended [ 78.361653][ T5926] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.377615][ T6074] EXT4-fs warning (device loop0): dx_probe:833: inode #2: comm syz.0.21: Unrecognised inode hash code 4 [ 78.385868][ T6072] EXT4-fs warning (device loop3): dx_probe:833: inode #2: comm syz.3.19: Unrecognised inode hash code 4 [ 78.394645][ T6074] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.21: Corrupt directory, running e2fsck is recommended [ 78.420129][ T6074] ================================================================== [ 78.428227][ T6074] BUG: KASAN: slab-use-after-free in __ext4_check_dir_entry+0x6fd/0x880 [ 78.436581][ T6074] Read of size 2 at addr ffff88803255a003 by task syz.0.21/6074 [ 78.444197][ T6074] [ 78.446524][ T6074] CPU: 1 UID: 0 PID: 6074 Comm: syz.0.21 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 [ 78.457013][ T6074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 78.467063][ T6074] Call Trace: [ 78.470344][ T6074] [ 78.473266][ T6074] dump_stack_lvl+0x241/0x360 [ 78.477941][ T6074] ? __pfx_dump_stack_lvl+0x10/0x10 [ 78.483132][ T6074] ? __pfx__printk+0x10/0x10 [ 78.487716][ T6074] ? _printk+0xd5/0x120 [ 78.491880][ T6074] ? __virt_addr_valid+0x183/0x530 [ 78.497003][ T6074] ? __virt_addr_valid+0x183/0x530 [ 78.502120][ T6074] print_report+0x169/0x550 [ 78.506631][ T6074] ? __virt_addr_valid+0x183/0x530 [ 78.511741][ T6074] ? __virt_addr_valid+0x183/0x530 [ 78.516846][ T6074] ? __virt_addr_valid+0x45f/0x530 [ 78.521949][ T6074] ? __phys_addr+0xba/0x170 [ 78.526444][ T6074] ? __ext4_check_dir_entry+0x6fd/0x880 [ 78.531983][ T6074] kasan_report+0x143/0x180 [ 78.536481][ T6074] ? __ext4_check_dir_entry+0x6fd/0x880 [ 78.542035][ T6074] __ext4_check_dir_entry+0x6fd/0x880 [ 78.547402][ T6074] ext4_readdir+0x1436/0x3a60 [ 78.552614][ T6074] ? __pfx_ext4_readdir+0x10/0x10 [ 78.557634][ T6074] ? iterate_dir+0x20c/0x800 [ 78.562214][ T6074] ? __pfx_lock_release+0x10/0x10 [ 78.567230][ T6074] ? fdget_pos+0x254/0x320 [ 78.571636][ T6074] ? __pfx_down_read_killable+0x10/0x10 [ 78.577174][ T6074] ? rcu_is_watching+0x15/0xb0 [ 78.582028][ T6074] ? __fget_files+0x2a/0x410 [ 78.586610][ T6074] iterate_dir+0x571/0x800 [ 78.591047][ T6074] __se_sys_getdents64+0x1e2/0x4b0 [ 78.596178][ T6074] ? __pfx___se_sys_getdents64+0x10/0x10 [ 78.601820][ T6074] ? __pfx_filldir64+0x10/0x10 [ 78.606622][ T6074] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 78.613588][ T6074] ? rcu_is_watching+0x15/0xb0 [ 78.618375][ T6074] ? rcu_is_watching+0x15/0xb0 [ 78.623233][ T6074] do_syscall_64+0xf3/0x230 [ 78.627934][ T6074] ? clear_bhb_loop+0x35/0x90 [ 78.632606][ T6074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.638500][ T6074] RIP: 0033:0x7fa747585d29 [ 78.642920][ T6074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.662524][ T6074] RSP: 002b:00007fa74835c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 78.670936][ T6074] RAX: ffffffffffffffda RBX: 00007fa747775fa0 RCX: 00007fa747585d29 [ 78.678902][ T6074] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000006 [ 78.686875][ T6074] RBP: 00007fa747601b08 R08: 0000000000000000 R09: 0000000000000000 [ 78.694838][ T6074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.702816][ T6074] R13: 0000000000000000 R14: 00007fa747775fa0 R15: 00007ffc3f7c0108 [ 78.710792][ T6074] [ 78.713805][ T6074] [ 78.716125][ T6074] Allocated by task 6033: [ 78.720533][ T6074] kasan_save_track+0x3f/0x80 [ 78.725224][ T6074] __kasan_slab_alloc+0x66/0x80 [ 78.730078][ T6074] kmem_cache_alloc_noprof+0x1d9/0x380 [ 78.735534][ T6074] vm_area_alloc+0x10e/0x1d0 [ 78.740130][ T6074] __mmap_region+0x1961/0x2d30 [ 78.744893][ T6074] mmap_region+0x1d0/0x2c0 [ 78.749345][ T6074] do_mmap+0x8f0/0x1000 [ 78.753508][ T6074] vm_mmap_pgoff+0x1dd/0x3d0 [ 78.758108][ T6074] elf_load+0x151/0x700 [ 78.762257][ T6074] load_elf_binary+0x100c/0x2770 [ 78.767187][ T6074] bprm_execve+0xaf5/0x17a0 [ 78.771680][ T6074] kernel_execve+0x931/0xa50 [ 78.776261][ T6074] call_usermodehelper_exec_async+0x237/0x380 [ 78.782341][ T6074] ret_from_fork+0x4b/0x80 [ 78.786745][ T6074] ret_from_fork_asm+0x1a/0x30 [ 78.791503][ T6074] [ 78.793819][ T6074] Freed by task 16: [ 78.797608][ T6074] kasan_save_track+0x3f/0x80 [ 78.802299][ T6074] kasan_save_free_info+0x40/0x50 [ 78.807315][ T6074] __kasan_slab_free+0x59/0x70 [ 78.812073][ T6074] kmem_cache_free+0x195/0x410 [ 78.816832][ T6074] __vm_area_free+0xe3/0x110 [ 78.821417][ T6074] rcu_core+0xaaa/0x17a0 [ 78.825649][ T6074] handle_softirqs+0x2d4/0x9b0 [ 78.830405][ T6074] run_ksoftirqd+0xca/0x130 [ 78.835332][ T6074] smpboot_thread_fn+0x544/0xa30 [ 78.840314][ T6074] kthread+0x2f0/0x390 [ 78.844373][ T6074] ret_from_fork+0x4b/0x80 [ 78.848780][ T6074] ret_from_fork_asm+0x1a/0x30 [ 78.853535][ T6074] [ 78.855852][ T6074] The buggy address belongs to the object at ffff88803255a000 [ 78.855852][ T6074] which belongs to the cache vma_lock of size 152 [ 78.869748][ T6074] The buggy address is located 3 bytes inside of [ 78.869748][ T6074] freed 152-byte region [ffff88803255a000, ffff88803255a098) [ 78.883377][ T6074] [ 78.885694][ T6074] The buggy address belongs to the physical page: [ 78.892110][ T6074] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3255a [ 78.900873][ T6074] memcg:ffff88807eb43301 [ 78.905100][ T6074] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 78.912197][ T6074] page_type: f5(slab) [ 78.916171][ T6074] raw: 00fff00000000000 ffff88801bafec80 dead000000000122 0000000000000000 [ 78.924755][ T6074] raw: 0000000000000000 0000000000120012 00000001f5000000 ffff88807eb43301 [ 78.933365][ T6074] page dumped because: kasan: bad access detected [ 78.939774][ T6074] page_owner tracks the page as allocated [ 78.945478][ T6074] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6033, tgid 6033 (modprobe), ts 76372160927, free_ts 76372082485 [ 78.964427][ T6074] post_alloc_hook+0x1f3/0x230 [ 78.969196][ T6074] get_page_from_freelist+0x3651/0x37a0 [ 78.974757][ T6074] __alloc_pages_noprof+0x292/0x710 [ 78.979951][ T6074] alloc_pages_mpol_noprof+0x3e8/0x680 [ 78.985403][ T6074] alloc_slab_page+0x6a/0x110 [ 78.990074][ T6074] allocate_slab+0x5a/0x2b0 [ 78.994656][ T6074] ___slab_alloc+0xc27/0x14a0 [ 78.999324][ T6074] __slab_alloc+0x58/0xa0 [ 79.003738][ T6074] kmem_cache_alloc_noprof+0x268/0x380 [ 79.009211][ T6074] vm_area_alloc+0x10e/0x1d0 [ 79.013811][ T6074] __mmap_region+0x1961/0x2d30 [ 79.018592][ T6074] mmap_region+0x1d0/0x2c0 [ 79.023002][ T6074] do_mmap+0x8f0/0x1000 [ 79.027148][ T6074] vm_mmap_pgoff+0x1dd/0x3d0 [ 79.031734][ T6074] elf_load+0x151/0x700 [ 79.035989][ T6074] load_elf_binary+0x100c/0x2770 [ 79.040924][ T6074] page last free pid 6033 tgid 6033 stack trace: [ 79.047266][ T6074] free_unref_folios+0xe23/0x1890 [ 79.052304][ T6074] folios_put_refs+0x76c/0x860 [ 79.057079][ T6074] free_pages_and_swap_cache+0x5c8/0x690 [ 79.064708][ T6074] tlb_flush_mmu+0x3a3/0x680 [ 79.069308][ T6074] tlb_finish_mmu+0xd4/0x200 [ 79.074004][ T6074] relocate_vma_down+0x504/0x600 [ 79.079012][ T6074] setup_arg_pages+0x668/0xc10 [ 79.085293][ T6074] load_elf_binary+0xb62/0x2770 [ 79.090151][ T6074] bprm_execve+0xaf5/0x17a0 [ 79.094671][ T6074] kernel_execve+0x931/0xa50 [ 79.099278][ T6074] call_usermodehelper_exec_async+0x237/0x380 [ 79.105436][ T6074] ret_from_fork+0x4b/0x80 [ 79.109857][ T6074] ret_from_fork_asm+0x1a/0x30 [ 79.114625][ T6074] [ 79.116940][ T6074] Memory state around the buggy address: [ 79.122649][ T6074] ffff888032559f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 79.130712][ T6074] ffff888032559f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 79.138853][ T6074] >ffff88803255a000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 79.147344][ T6074] ^ [ 79.151661][ T6074] ffff88803255a080: fb fb fb fc fc fc fc fc fc fc fc fa fb fb fb fb [ 79.159711][ T6074] ffff88803255a100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc [ 79.167775][ T6074] ================================================================== [ 79.185955][ T5926] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.187181][ T6072] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.19: Corrupt directory, running e2fsck is recommended [ 79.194840][ T5926] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.223181][ T6072] EXT4-fs error (device loop3): ext4_readdir:261: inode #2: block 255: comm syz.3.19: path (unknown): bad entry in directory: rec_len % 4 != 0 - offset=1023, inode=1893625856, rec_len=33339, size=1024 fake=0 [ 79.226362][ T5923] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.243977][ T6074] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 79.243993][ T6074] CPU: 0 UID: 0 PID: 6074 Comm: syz.0.21 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 [ 79.244014][ T6074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 79.244024][ T6074] Call Trace: [ 79.244031][ T6074] [ 79.244039][ T6074] dump_stack_lvl+0x241/0x360 [ 79.244067][ T6074] ? __pfx_dump_stack_lvl+0x10/0x10 [ 79.244087][ T6074] ? __pfx__printk+0x10/0x10 [ 79.244104][ T6074] ? rcu_is_watching+0x15/0xb0 [ 79.244126][ T6074] ? preempt_schedule+0xe1/0xf0 [ 79.244148][ T6074] ? vscnprintf+0x5d/0x90 [ 79.244167][ T6074] panic+0x349/0x880 [ 79.244186][ T6074] ? check_panic_on_warn+0x21/0xb0 [ 79.244204][ T6074] ? __pfx_panic+0x10/0x10 [ 79.244224][ T6074] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 79.244245][ T6074] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 79.244266][ T6074] ? print_report+0x502/0x550 [ 79.244290][ T6074] check_panic_on_warn+0x86/0xb0 [ 79.244308][ T6074] ? __ext4_check_dir_entry+0x6fd/0x880 [ 79.244325][ T6074] end_report+0x77/0x160 [ 79.244346][ T6074] kasan_report+0x154/0x180 [ 79.244368][ T6074] ? __ext4_check_dir_entry+0x6fd/0x880 [ 79.244387][ T6074] __ext4_check_dir_entry+0x6fd/0x880 [ 79.244407][ T6074] ext4_readdir+0x1436/0x3a60 [ 79.244437][ T6074] ? __pfx_ext4_readdir+0x10/0x10 [ 79.244462][ T6074] ? iterate_dir+0x20c/0x800 [ 79.244482][ T6074] ? __pfx_lock_release+0x10/0x10 [ 79.244499][ T6074] ? fdget_pos+0x254/0x320 [ 79.244515][ T6074] ? __pfx_down_read_killable+0x10/0x10 [ 79.244534][ T6074] ? rcu_is_watching+0x15/0xb0 [ 79.244555][ T6074] ? __fget_files+0x2a/0x410 [ 79.244573][ T6074] iterate_dir+0x571/0x800 [ 79.244595][ T6074] __se_sys_getdents64+0x1e2/0x4b0 [ 79.244618][ T6074] ? __pfx___se_sys_getdents64+0x10/0x10 [ 79.244639][ T6074] ? __pfx_filldir64+0x10/0x10 [ 79.244660][ T6074] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 79.244678][ T6074] ? rcu_is_watching+0x15/0xb0 [ 79.244698][ T6074] ? rcu_is_watching+0x15/0xb0 [ 79.244718][ T6074] do_syscall_64+0xf3/0x230 [ 79.244740][ T6074] ? clear_bhb_loop+0x35/0x90 [ 79.244758][ T6074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.244781][ T6074] RIP: 0033:0x7fa747585d29 [ 79.244796][ T6074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.244809][ T6074] RSP: 002b:00007fa74835c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 79.244829][ T6074] RAX: ffffffffffffffda RBX: 00007fa747775fa0 RCX: 00007fa747585d29 [ 79.244843][ T6074] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000006 [ 79.244853][ T6074] RBP: 00007fa747601b08 R08: 0000000000000000 R09: 0000000000000000 [ 79.244865][ T6074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.244876][ T6074] R13: 0000000000000000 R14: 00007fa747775fa0 R15: 00007ffc3f7c0108 [ 79.244893][ T6074] [ 79.252608][ T6074] Kernel Offset: disabled