Warning: Permanently added '[localhost]:45650' (ED25519) to the list of known hosts. 2025/09/21 20:21:04 parsed 1 programs syzkaller login: [ 83.924381][ T5344] cgroup: Unknown subsys name 'net' [ 84.010347][ T5344] cgroup: Unknown subsys name 'cpuset' [ 84.018497][ T5344] cgroup: Unknown subsys name 'rlimit' [ 85.628259][ T5344] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 90.157076][ T5359] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 90.952920][ T5403] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.957347][ T5403] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.960823][ T5403] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.965762][ T5403] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.971297][ T5403] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.887219][ T10] cfg80211: failed to load regulatory.db [ 92.932849][ T5361] chnl_net:caif_netlink_parms(): no params data found [ 93.047325][ T5403] Bluetooth: hci0: command tx timeout [ 93.611304][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.614396][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.121159][ T1037] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.132119][ T5361] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.145425][ T1037] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.150536][ T5361] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.153549][ T5361] bridge_slave_0: entered allmulticast mode [ 94.177760][ T5361] bridge_slave_0: entered promiscuous mode [ 94.235447][ T5361] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.251113][ T5361] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.254314][ T5361] bridge_slave_1: entered allmulticast mode [ 94.296324][ T5361] bridge_slave_1: entered promiscuous mode [ 94.401012][ T5361] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.451039][ T5361] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.555853][ T5361] team0: Port device team_slave_0 added [ 94.577811][ T5361] team0: Port device team_slave_1 added [ 94.651839][ T5361] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.676911][ T5361] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.716982][ T5361] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.728457][ T5361] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.739382][ T5361] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.776673][ T5361] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.878112][ T5361] hsr_slave_0: entered promiscuous mode [ 94.885244][ T5361] hsr_slave_1: entered promiscuous mode [ 95.188732][ T5361] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 95.210431][ T5361] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 95.227678][ T5361] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 95.246850][ T5361] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 95.388582][ T5361] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.414031][ T5361] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.434977][ T1037] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.438634][ T1037] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.467959][ T1037] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.471097][ T1037] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.797218][ T5361] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.860301][ T5361] veth0_vlan: entered promiscuous mode [ 95.880991][ T5361] veth1_vlan: entered promiscuous mode [ 95.923252][ T5361] veth0_macvtap: entered promiscuous mode [ 95.944661][ T5361] veth1_macvtap: entered promiscuous mode [ 95.980232][ T5361] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.998257][ T5361] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.022945][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.036726][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.040511][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.044397][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2025/09/21 20:21:18 executed programs: 0 [ 96.420438][ T4702] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.429413][ T4702] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.433419][ T4702] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.437855][ T4702] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.441711][ T4702] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.503694][ T5361] syz-executor (5361) used greatest stack depth: 19544 bytes left [ 96.559048][ T4702] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 96.562898][ T5475] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 96.576255][ T5475] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 96.580208][ T5475] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 96.584860][ T5475] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 96.589274][ T5475] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 96.606840][ T4702] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 96.610451][ T4702] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 96.616706][ T5476] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 96.620368][ T5476] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 96.738475][ T5403] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 96.742808][ T5403] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 96.746372][ T5403] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 96.750007][ T5403] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 96.753496][ T5403] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 96.840015][ T5475] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 96.884469][ T5475] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 96.915330][ T5475] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 96.926642][ T5476] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 96.930357][ T5476] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 96.995200][ T4702] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 97.010355][ T4702] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 97.026906][ T4702] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 97.047581][ T4702] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 97.056735][ T4702] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 98.499693][ T1089] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.567257][ T4702] Bluetooth: hci0: command tx timeout [ 98.648760][ T4702] Bluetooth: hci1: command tx timeout [ 98.651335][ T4702] Bluetooth: hci2: command tx timeout [ 98.809442][ T5475] Bluetooth: hci3: command tx timeout [ 98.838866][ T1089] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.978685][ T5475] Bluetooth: hci4: command tx timeout [ 99.021018][ T1089] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.126543][ T5475] Bluetooth: hci5: command tx timeout [ 99.163056][ T1089] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.241056][ T5467] chnl_net:caif_netlink_parms(): no params data found [ 99.794881][ T1089] bridge_slave_1: left allmulticast mode [ 99.807377][ T1089] bridge_slave_1: left promiscuous mode [ 99.811850][ T1089] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.829934][ T1089] bridge_slave_0: left allmulticast mode [ 99.832330][ T1089] bridge_slave_0: left promiscuous mode [ 99.834917][ T1089] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.340857][ T1089] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.348005][ T1089] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.353251][ T1089] bond0 (unregistering): Released all slaves [ 100.646395][ T5475] Bluetooth: hci0: command tx timeout [ 100.726300][ T5475] Bluetooth: hci2: command tx timeout [ 100.728595][ T5475] Bluetooth: hci1: command tx timeout [ 100.772636][ T5467] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.775628][ T5467] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.788247][ T5467] bridge_slave_0: entered allmulticast mode [ 100.792055][ T5467] bridge_slave_0: entered promiscuous mode [ 100.808435][ T5467] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.811344][ T5467] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.814160][ T5467] bridge_slave_1: entered allmulticast mode [ 100.830785][ T5467] bridge_slave_1: entered promiscuous mode [ 100.893629][ T4702] Bluetooth: hci3: command tx timeout [ 101.047989][ T4702] Bluetooth: hci4: command tx timeout [ 101.143128][ T5471] chnl_net:caif_netlink_parms(): no params data found [ 101.155202][ T5487] chnl_net:caif_netlink_parms(): no params data found [ 101.207582][ T4702] Bluetooth: hci5: command tx timeout [ 101.223498][ T5467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.228008][ T5482] chnl_net:caif_netlink_parms(): no params data found [ 101.249038][ T5467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.280910][ T1089] hsr_slave_0: left promiscuous mode [ 101.283709][ T1089] hsr_slave_1: left promiscuous mode [ 101.296771][ T1089] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.299990][ T1089] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.308169][ T1089] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.311398][ T1089] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.335713][ T1089] veth1_macvtap: left promiscuous mode [ 101.340304][ T1089] veth0_macvtap: left promiscuous mode [ 101.342763][ T1089] veth1_vlan: left promiscuous mode [ 101.345195][ T1089] veth0_vlan: left promiscuous mode [ 101.682342][ T1089] team0 (unregistering): Port device team_slave_1 removed [ 101.704209][ T1089] team0 (unregistering): Port device team_slave_0 removed [ 102.055850][ T5472] chnl_net:caif_netlink_parms(): no params data found [ 102.133155][ T5467] team0: Port device team_slave_0 added [ 102.140426][ T5478] chnl_net:caif_netlink_parms(): no params data found [ 102.234264][ T5467] team0: Port device team_slave_1 added [ 102.460364][ T5467] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.463427][ T5467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.489037][ T5467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.510778][ T5467] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.513771][ T5467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.536928][ T5467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.683260][ T5471] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.695338][ T5471] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.699102][ T5471] bridge_slave_0: entered allmulticast mode [ 102.709160][ T5471] bridge_slave_0: entered promiscuous mode [ 102.721373][ T5482] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.724235][ T5482] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.728622][ T4702] Bluetooth: hci0: command tx timeout [ 102.740347][ T5482] bridge_slave_0: entered allmulticast mode [ 102.744108][ T5482] bridge_slave_0: entered promiscuous mode [ 102.768719][ T5487] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.771996][ T5487] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.775050][ T5487] bridge_slave_0: entered allmulticast mode [ 102.782533][ T5487] bridge_slave_0: entered promiscuous mode [ 102.806260][ T4702] Bluetooth: hci1: command tx timeout [ 102.808564][ T4702] Bluetooth: hci2: command tx timeout [ 102.819399][ T5471] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.822485][ T5471] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.825582][ T5471] bridge_slave_1: entered allmulticast mode [ 102.842498][ T5471] bridge_slave_1: entered promiscuous mode [ 102.845561][ T5482] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.851759][ T5482] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.854735][ T5482] bridge_slave_1: entered allmulticast mode [ 102.861223][ T5482] bridge_slave_1: entered promiscuous mode [ 102.882694][ T5487] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.885746][ T5487] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.894946][ T5487] bridge_slave_1: entered allmulticast mode [ 102.898904][ T5487] bridge_slave_1: entered promiscuous mode [ 102.902121][ T5472] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.905079][ T5472] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.911630][ T5472] bridge_slave_0: entered allmulticast mode [ 102.915410][ T5472] bridge_slave_0: entered promiscuous mode [ 102.941584][ T5478] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.944639][ T5478] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.950962][ T5478] bridge_slave_0: entered allmulticast mode [ 102.954691][ T5478] bridge_slave_0: entered promiscuous mode [ 102.963874][ T5467] hsr_slave_0: entered promiscuous mode [ 102.969707][ T5475] Bluetooth: hci3: command tx timeout [ 102.976416][ T5467] hsr_slave_1: entered promiscuous mode [ 102.992099][ T5472] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.995026][ T5472] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.009273][ T5472] bridge_slave_1: entered allmulticast mode [ 103.016362][ T5472] bridge_slave_1: entered promiscuous mode [ 103.089347][ T5478] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.092359][ T5478] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.095356][ T5478] bridge_slave_1: entered allmulticast mode [ 103.119043][ T5478] bridge_slave_1: entered promiscuous mode [ 103.135373][ T5475] Bluetooth: hci4: command tx timeout [ 103.140394][ T5471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.178346][ T5472] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.184346][ T5482] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.201448][ T5482] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.225664][ T5471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.258954][ T5487] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.287254][ T5475] Bluetooth: hci5: command tx timeout [ 103.300497][ T5472] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.375851][ T5487] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.459636][ T5478] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.464523][ T5471] team0: Port device team_slave_0 added [ 103.530645][ T5482] team0: Port device team_slave_0 added [ 103.534685][ T5471] team0: Port device team_slave_1 added [ 103.542842][ T5478] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.548473][ T5487] team0: Port device team_slave_0 added [ 103.573542][ T5472] team0: Port device team_slave_0 added [ 103.581507][ T5482] team0: Port device team_slave_1 added [ 103.611757][ T5487] team0: Port device team_slave_1 added [ 103.621673][ T5472] team0: Port device team_slave_1 added [ 103.704614][ T5471] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.720728][ T5471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.746192][ T5471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.754844][ T5471] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.767070][ T5471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.797029][ T5471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.803603][ T5478] team0: Port device team_slave_0 added [ 103.864109][ T5482] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.873590][ T5482] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.906159][ T5482] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.949289][ T5478] team0: Port device team_slave_1 added [ 103.952483][ T5472] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.955308][ T5472] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.988911][ T5472] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.997077][ T5487] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.000123][ T5487] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.049460][ T5487] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.075780][ T5487] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.079101][ T5487] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.108168][ T5487] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.113571][ T5482] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.119699][ T5482] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.145037][ T5482] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.184334][ T5472] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.187734][ T5472] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.202433][ T5472] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.253779][ T5471] hsr_slave_0: entered promiscuous mode [ 104.260848][ T5471] hsr_slave_1: entered promiscuous mode [ 104.263860][ T5471] debugfs: 'hsr0' already exists in 'hsr' [ 104.266827][ T5471] Cannot create hsr debugfs directory [ 104.342943][ T5478] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.346031][ T5478] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.374476][ T5478] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.445454][ T5478] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.451899][ T5478] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.463705][ T5478] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.485645][ T5472] hsr_slave_0: entered promiscuous mode [ 104.491833][ T5472] hsr_slave_1: entered promiscuous mode [ 104.495523][ T5472] debugfs: 'hsr0' already exists in 'hsr' [ 104.498408][ T5472] Cannot create hsr debugfs directory [ 104.505338][ T5487] hsr_slave_0: entered promiscuous mode [ 104.512902][ T5487] hsr_slave_1: entered promiscuous mode [ 104.516533][ T5487] debugfs: 'hsr0' already exists in 'hsr' [ 104.519112][ T5487] Cannot create hsr debugfs directory [ 104.531059][ T5482] hsr_slave_0: entered promiscuous mode [ 104.534388][ T5482] hsr_slave_1: entered promiscuous mode [ 104.538184][ T5482] debugfs: 'hsr0' already exists in 'hsr' [ 104.541197][ T5482] Cannot create hsr debugfs directory [ 104.725302][ T5467] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 104.809528][ T5475] Bluetooth: hci0: command tx timeout [ 104.823992][ T5478] hsr_slave_0: entered promiscuous mode [ 104.831729][ T5478] hsr_slave_1: entered promiscuous mode [ 104.834706][ T5478] debugfs: 'hsr0' already exists in 'hsr' [ 104.839428][ T5478] Cannot create hsr debugfs directory [ 104.841974][ T5467] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 104.878374][ T5467] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 104.886558][ T5475] Bluetooth: hci2: command tx timeout [ 104.888958][ T5475] Bluetooth: hci1: command tx timeout [ 104.994050][ T5467] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.047166][ T4702] Bluetooth: hci3: command tx timeout [ 105.207156][ T4702] Bluetooth: hci4: command tx timeout [ 105.368654][ T4702] Bluetooth: hci5: command tx timeout [ 105.807814][ T5467] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.868392][ T5467] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.871921][ T5482] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 105.887727][ T5482] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 105.900659][ T5482] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 105.923607][ T5482] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 105.970047][ T1042] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.973278][ T1042] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.995532][ T1042] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.998807][ T1042] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.222695][ T5472] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 106.287969][ T5472] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 106.300157][ T5472] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 106.390312][ T5472] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 106.517702][ T5482] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.588769][ T5471] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 106.648060][ T5482] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.711360][ T5471] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 106.743091][ T5471] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 106.802109][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.805306][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.843333][ T5471] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 106.901442][ T5467] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.950624][ T1042] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.953886][ T1042] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.079302][ T5487] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 107.143078][ T5487] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 107.225548][ T5467] veth0_vlan: entered promiscuous mode [ 107.242104][ T5482] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 107.256853][ T5482] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 107.295013][ T5487] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 107.325687][ T5467] veth1_vlan: entered promiscuous mode [ 107.353616][ T5487] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 107.639966][ T5472] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.644476][ T5478] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 107.707986][ T5471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.733128][ T5478] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 107.820946][ T5472] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.824872][ T5467] veth0_macvtap: entered promiscuous mode [ 107.883195][ T5478] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 107.892260][ T5478] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 107.921418][ T5467] veth1_macvtap: entered promiscuous mode [ 107.949967][ T5471] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.989651][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.992573][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.085077][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.088350][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.120496][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.123485][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.140253][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.143098][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.205783][ T5482] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.322029][ T5467] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.463516][ T5467] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.636399][ T43] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.784434][ T43] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.893350][ T43] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.917139][ T43] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.991951][ T5487] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.185410][ T5487] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.279787][ T5478] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.300387][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.303443][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.348674][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.351835][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.414288][ T5478] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.474216][ T1042] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.490202][ T1042] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.584598][ T169] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.587693][ T169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.615378][ T5471] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.691588][ T169] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.694665][ T169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.725338][ T5482] veth0_vlan: entered promiscuous mode [ 109.834884][ T5472] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.872292][ T1042] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.894848][ T1042] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.931532][ T5471] veth0_vlan: entered promiscuous mode [ 110.009695][ T5482] veth1_vlan: entered promiscuous mode [ 110.044752][ T5478] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 110.100766][ T5471] veth1_vlan: entered promiscuous mode 2025/09/21 20:21:32 executed programs: 12 [ 110.277080][ T5482] veth0_macvtap: entered promiscuous mode [ 110.332279][ T5482] veth1_macvtap: entered promiscuous mode [ 110.418980][ T5471] veth0_macvtap: entered promiscuous mode [ 110.503711][ T5471] veth1_macvtap: entered promiscuous mode [ 110.535786][ T5472] veth0_vlan: entered promiscuous mode [ 110.635212][ T5482] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.716907][ T5487] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.771251][ T5482] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.824748][ T5472] veth1_vlan: entered promiscuous mode [ 110.855517][ T1040] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.877386][ T1040] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.881030][ T1040] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.884697][ T1040] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.964744][ T5471] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.089620][ T5471] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.133356][ T5478] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.264093][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.278469][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.282221][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.381546][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.443451][ T5472] veth0_macvtap: entered promiscuous mode [ 111.485715][ T5472] veth1_macvtap: entered promiscuous mode [ 111.630682][ T5478] veth0_vlan: entered promiscuous mode [ 111.685508][ T31] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.725792][ T31] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.747740][ T5472] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.754478][ T5478] veth1_vlan: entered promiscuous mode [ 111.828905][ T5472] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.838981][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.843151][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.886575][ T1099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.889872][ T1099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.931970][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.983764][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.074250][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.083534][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.115575][ T5487] veth0_vlan: entered promiscuous mode [ 112.268160][ T5487] veth1_vlan: entered promiscuous mode [ 112.284160][ T5478] veth0_macvtap: entered promiscuous mode [ 112.386253][ T1099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.389570][ T1099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.428446][ T5478] veth1_macvtap: entered promiscuous mode [ 112.490175][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.493490][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.529749][ T5487] veth0_macvtap: entered promiscuous mode [ 112.535017][ T5487] veth1_macvtap: entered promiscuous mode [ 112.673385][ T5487] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.700902][ T5478] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.742237][ T5487] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.830004][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.834379][ T5478] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.856373][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.873644][ T1040] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.885509][ T1040] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.956834][ T1040] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.993918][ T1040] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.051014][ T169] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.073411][ T169] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.093826][ T169] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.165709][ T169] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.450660][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.454114][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.679155][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.682335][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.787443][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.790808][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.003537][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.043236][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/09/21 20:21:37 executed programs: 133 2025/09/21 20:21:42 executed programs: 412 2025/09/21 20:21:47 executed programs: 688 [ 126.536446][ T6468] ================================================================== [ 126.539828][ T6468] BUG: KASAN: slab-use-after-free in nr_rt_ioctl+0x594/0xd50 [ 126.542999][ T6468] Read of size 2 at addr ffff888059f92432 by task syz.0.770/6468 [ 126.547280][ T6468] [ 126.548383][ T6468] CPU: 0 UID: 0 PID: 6468 Comm: syz.0.770 Not tainted syzkaller #0 PREEMPT(full) [ 126.548399][ T6468] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 126.548407][ T6468] Call Trace: [ 126.548414][ T6468] [ 126.548420][ T6468] dump_stack_lvl+0x189/0x250 [ 126.548439][ T6468] ? __kasan_check_byte+0x12/0x40 [ 126.548501][ T6468] ? __pfx_dump_stack_lvl+0x10/0x10 [ 126.548513][ T6468] ? lock_release+0x4b/0x3e0 [ 126.548532][ T6468] ? __virt_addr_valid+0x4a5/0x5c0 [ 126.548547][ T6468] print_report+0xca/0x240 [ 126.548558][ T6468] ? nr_rt_ioctl+0x594/0xd50 [ 126.548573][ T6468] kasan_report+0x118/0x150 [ 126.548588][ T6468] ? nr_rt_ioctl+0x594/0xd50 [ 126.548604][ T6468] nr_rt_ioctl+0x594/0xd50 [ 126.548621][ T6468] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 126.548639][ T6468] ? apparmor_capable+0x137/0x1b0 [ 126.548653][ T6468] ? capable+0x89/0xe0 [ 126.548664][ T6468] ? nr_ioctl+0x1b1/0x3b0 [ 126.548677][ T6468] sock_do_ioctl+0xdc/0x300 [ 126.548694][ T6468] ? __pfx_sock_do_ioctl+0x10/0x10 [ 126.548707][ T6468] ? do_futex+0x395/0x420 [ 126.548726][ T6468] sock_ioctl+0x576/0x790 [ 126.548741][ T6468] ? __pfx_sock_ioctl+0x10/0x10 [ 126.548756][ T6468] ? __pfx___se_sys_futex+0x10/0x10 [ 126.548773][ T6468] ? bpf_lsm_file_ioctl+0x9/0x20 [ 126.548785][ T6468] ? __pfx_sock_ioctl+0x10/0x10 [ 126.548797][ T6468] __se_sys_ioctl+0xfc/0x170 [ 126.548808][ T6468] do_syscall_64+0xfa/0x3b0 [ 126.548854][ T6468] ? lockdep_hardirqs_on+0x9c/0x150 [ 126.548865][ T6468] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.548876][ T6468] ? clear_bhb_loop+0x60/0xb0 [ 126.548889][ T6468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.548900][ T6468] RIP: 0033:0x7fd1b758ec29 [ 126.548912][ T6468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.548922][ T6468] RSP: 002b:00007ffc2d6f7ea8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 126.548936][ T6468] RAX: ffffffffffffffda RBX: 00007fd1b77d5fa0 RCX: 00007fd1b758ec29 [ 126.548944][ T6468] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000004 [ 126.548951][ T6468] RBP: 00007fd1b7611e41 R08: 0000000000000000 R09: 0000000000000000 [ 126.548958][ T6468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.548965][ T6468] R13: 00007fd1b77d5fa0 R14: 00007fd1b77d5fa0 R15: 0000000000000002 [ 126.548977][ T6468] [ 126.548981][ T6468] [ 126.651479][ T6468] Allocated by task 6468: [ 126.653504][ T6468] kasan_save_track+0x3e/0x80 [ 126.655424][ T6468] __kasan_kmalloc+0x93/0xb0 [ 126.657486][ T6468] __kmalloc_cache_noprof+0x230/0x3d0 [ 126.659782][ T6468] nr_add_node+0x7f8/0x2570 [ 126.661755][ T6468] nr_rt_ioctl+0xc12/0xd50 [ 126.663712][ T6468] sock_do_ioctl+0xdc/0x300 [ 126.665583][ T6468] sock_ioctl+0x576/0x790 [ 126.667414][ T6468] __se_sys_ioctl+0xfc/0x170 [ 126.669303][ T6468] do_syscall_64+0xfa/0x3b0 [ 126.671268][ T6468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.674077][ T6468] [ 126.675081][ T6468] Freed by task 6468: [ 126.676802][ T6468] kasan_save_track+0x3e/0x80 [ 126.678769][ T6468] kasan_save_free_info+0x46/0x50 [ 126.680830][ T6468] __kasan_slab_free+0x5b/0x80 [ 126.682809][ T6468] kfree+0x18e/0x440 [ 126.684455][ T6468] nr_rt_ioctl+0x2e7/0xd50 [ 126.686287][ T6468] sock_do_ioctl+0xdc/0x300 [ 126.688272][ T6468] sock_ioctl+0x576/0x790 [ 126.690360][ T6468] __se_sys_ioctl+0xfc/0x170 [ 126.692133][ T6468] do_syscall_64+0xfa/0x3b0 [ 126.694090][ T6468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.696656][ T6468] [ 126.697736][ T6468] The buggy address belongs to the object at ffff888059f92400 [ 126.697736][ T6468] which belongs to the cache kmalloc-64 of size 64 [ 126.703263][ T6468] The buggy address is located 50 bytes inside of [ 126.703263][ T6468] freed 64-byte region [ffff888059f92400, ffff888059f92440) [ 126.708798][ T6468] [ 126.709764][ T6468] The buggy address belongs to the physical page: [ 126.712414][ T6468] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x59f92 [ 126.716066][ T6468] anon flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 126.719265][ T6468] page_type: f5(slab) [ 126.720999][ T6468] raw: 04fff00000000000 ffff88801a8418c0 ffffea00013b6140 dead000000000005 [ 126.724457][ T6468] raw: 0000000000000000 0000000000200020 00000000f5000000 0000000000000000 [ 126.728032][ T6468] page dumped because: kasan: bad access detected [ 126.731086][ T6468] page_owner tracks the page as allocated [ 126.733203][ T6468] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5703, tgid 5703 (modprobe), ts 110750311590, free_ts 110660661386 [ 126.741196][ T6468] post_alloc_hook+0x240/0x2a0 [ 126.743188][ T6468] get_page_from_freelist+0x21e4/0x22c0 [ 126.745490][ T6468] __alloc_frozen_pages_noprof+0x181/0x370 [ 126.747923][ T6468] alloc_pages_mpol+0x232/0x4a0 [ 126.749906][ T6468] allocate_slab+0x8a/0x370 [ 126.751816][ T6468] ___slab_alloc+0xbeb/0x1420 [ 126.753834][ T6468] __kmalloc_noprof+0x305/0x4f0 [ 126.756043][ T6468] tomoyo_encode+0x28b/0x550 [ 126.757878][ T6468] tomoyo_realpath_from_path+0x58d/0x5d0 [ 126.760069][ T6468] tomoyo_path_perm+0x213/0x4b0 [ 126.761986][ T6468] security_inode_getattr+0x12f/0x330 [ 126.764404][ T6468] __x64_sys_newfstat+0xfc/0x200 [ 126.766324][ T6468] do_syscall_64+0xfa/0x3b0 [ 126.768094][ T6468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.770507][ T6468] page last free pid 5360 tgid 5360 stack trace: [ 126.773235][ T6468] __free_frozen_pages+0xbc4/0xd30 [ 126.775381][ T6468] __slab_free+0x303/0x3c0 [ 126.777249][ T6468] qlist_free_all+0x97/0x140 [ 126.779149][ T6468] kasan_quarantine_reduce+0x148/0x160 [ 126.781374][ T6468] __kasan_slab_alloc+0x22/0x80 [ 126.783520][ T6468] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 126.785849][ T6468] getname_flags+0xb8/0x540 [ 126.787954][ T6468] do_readlinkat+0xbc/0x500 [ 126.789900][ T6468] __x64_sys_readlink+0x7f/0x90 [ 126.792023][ T6468] do_syscall_64+0xfa/0x3b0 [ 126.793924][ T6468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.796508][ T6468] [ 126.797534][ T6468] Memory state around the buggy address: [ 126.799888][ T6468] ffff888059f92300: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 126.803171][ T6468] ffff888059f92380: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 126.806438][ T6468] >ffff888059f92400: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 126.809796][ T6468] ^ [ 126.812275][ T6468] ffff888059f92480: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 126.815639][ T6468] ffff888059f92500: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 126.818950][ T6468] ================================================================== [ 126.822513][ T6468] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 126.825541][ T6468] CPU: 0 UID: 0 PID: 6468 Comm: syz.0.770 Not tainted syzkaller #0 PREEMPT(full) [ 126.829389][ T6468] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 126.833973][ T6468] Call Trace: [ 126.835452][ T6468] [ 126.836701][ T6468] dump_stack_lvl+0x99/0x250 [ 126.838698][ T6468] ? __asan_memcpy+0x40/0x70 [ 126.840853][ T6468] ? __pfx_dump_stack_lvl+0x10/0x10 [ 126.843102][ T6468] ? __pfx__printk+0x10/0x10 [ 126.845161][ T6468] vpanic+0x281/0x750 [ 126.846878][ T6468] ? __pfx_vpanic+0x10/0x10 [ 126.848811][ T6468] ? irqentry_exit+0x74/0x90 [ 126.850856][ T6468] panic+0xb9/0xc0 [ 126.852520][ T6468] ? __pfx_panic+0x10/0x10 [ 126.854456][ T6468] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 126.857071][ T6468] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 126.859697][ T6468] ? nr_rt_ioctl+0x594/0xd50 [ 126.861747][ T6468] check_panic_on_warn+0x89/0xb0 [ 126.864100][ T6468] ? nr_rt_ioctl+0x594/0xd50 [ 126.866060][ T6468] end_report+0x78/0x160 [ 126.867958][ T6468] kasan_report+0x129/0x150 [ 126.869893][ T6468] ? nr_rt_ioctl+0x594/0xd50 [ 126.871845][ T6468] nr_rt_ioctl+0x594/0xd50 [ 126.873676][ T6468] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 126.875716][ T6468] ? apparmor_capable+0x137/0x1b0 [ 126.877884][ T6468] ? capable+0x89/0xe0 [ 126.879579][ T6468] ? nr_ioctl+0x1b1/0x3b0 [ 126.881432][ T6468] sock_do_ioctl+0xdc/0x300 [ 126.883252][ T6468] ? __pfx_sock_do_ioctl+0x10/0x10 [ 126.885573][ T6468] ? do_futex+0x395/0x420 [ 126.887496][ T6468] sock_ioctl+0x576/0x790 [ 126.889550][ T6468] ? __pfx_sock_ioctl+0x10/0x10 [ 126.891785][ T6468] ? __pfx___se_sys_futex+0x10/0x10 [ 126.894086][ T6468] ? bpf_lsm_file_ioctl+0x9/0x20 [ 126.896232][ T6468] ? __pfx_sock_ioctl+0x10/0x10 [ 126.898377][ T6468] __se_sys_ioctl+0xfc/0x170 [ 126.900387][ T6468] do_syscall_64+0xfa/0x3b0 [ 126.902479][ T6468] ? lockdep_hardirqs_on+0x9c/0x150 [ 126.904775][ T6468] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.907421][ T6468] ? clear_bhb_loop+0x60/0xb0 [ 126.909438][ T6468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.911932][ T6468] RIP: 0033:0x7fd1b758ec29 [ 126.913775][ T6468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.921903][ T6468] RSP: 002b:00007ffc2d6f7ea8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 126.925358][ T6468] RAX: ffffffffffffffda RBX: 00007fd1b77d5fa0 RCX: 00007fd1b758ec29 [ 126.928674][ T6468] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000004 [ 126.931937][ T6468] RBP: 00007fd1b7611e41 R08: 0000000000000000 R09: 0000000000000000 [ 126.935416][ T6468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.938952][ T6468] R13: 00007fd1b77d5fa0 R14: 00007fd1b77d5fa0 R15: 0000000000000002 [ 126.942550][ T6468] [ 126.944107][ T6468] Kernel Offset: disabled [ 126.946136][ T6468] Rebooting in 86400 seconds.. VM DIAGNOSIS: 20:21:49 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000074 RBX=0000000000000074 RCX=0000000000000000 RDX=00000000000003f8 RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000dc5f3d0 R8 =ffff888034008237 R9 =1ffff11006801046 R10=dffffc0000000000 R11=ffffffff85513c60 R12=dffffc0000000000 R13=ffffffff99d0e8e8 R14=ffffffff9a003860 R15=0000000000000000 RIP=ffffffff85513cdc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055556a6af500 ffffffff 00c00000 GS =0000 ffff88808d007000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f59fc82eba0 CR3=00000000533d3000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000030717062 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc2d6f8306 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc2d6f8306 00007ffc2d6f830c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd1b7612e6e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd1b7612e7b ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd1b7612e75 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd1b7612e89 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd1b7612f0f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd1b7612fed ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c667265766f20 6772612061746164 000a747261745374 6f68000700080006 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49435740534a05 4257440544514441 000a515744515351 4a4d5655444b5300 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000