Warning: Permanently added '10.128.1.156' (ED25519) to the list of known hosts. 1970/01/01 00:00:27 parsed 1 programs [ 28.943097][ T6554] cgroup: Unknown subsys name 'net' [ 29.032979][ T6554] cgroup: Unknown subsys name 'cpuset' [ 29.035437][ T6554] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 29.249725][ T6554] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 34.594272][ T6562] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 35.731526][ T6616] chnl_net:caif_netlink_parms(): no params data found [ 35.754473][ T6616] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.754768][ T6616] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.754850][ T6616] bridge_slave_0: entered allmulticast mode [ 35.755499][ T6616] bridge_slave_0: entered promiscuous mode [ 35.756651][ T6616] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.756696][ T6616] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.756742][ T6616] bridge_slave_1: entered allmulticast mode [ 35.757142][ T6616] bridge_slave_1: entered promiscuous mode [ 35.792122][ T6616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.793029][ T6616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.803693][ T6616] team0: Port device team_slave_0 added [ 35.806202][ T6616] team0: Port device team_slave_1 added [ 35.816447][ T6616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.817346][ T6616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.817369][ T6616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.818242][ T6616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.818250][ T6616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.818264][ T6616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.833543][ T6616] hsr_slave_0: entered promiscuous mode [ 35.833893][ T6616] hsr_slave_1: entered promiscuous mode [ 35.879031][ T6616] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 35.882894][ T6616] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 35.885154][ T6616] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 35.887261][ T6616] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 35.901203][ T6616] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.901249][ T6616] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.901447][ T6616] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.901471][ T6616] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.917773][ T6616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.921978][ T15] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.923769][ T15] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.928076][ T6616] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.931285][ T1948] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.931330][ T1948] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.940720][ T6616] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 35.940749][ T6616] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.945045][ T1948] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.945088][ T1948] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.014735][ T6616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.025023][ T6616] veth0_vlan: entered promiscuous mode [ 36.027350][ T6616] veth1_vlan: entered promiscuous mode [ 36.035438][ T6616] veth0_macvtap: entered promiscuous mode [ 36.036423][ T6616] veth1_macvtap: entered promiscuous mode [ 36.040176][ T6616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.041267][ T6616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.043787][ T15] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.044000][ T15] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.044056][ T15] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.044116][ T15] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.278320][ T15] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.331927][ T15] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.366134][ T6643] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 36.368001][ T6643] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 36.369519][ T6643] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 36.371043][ T6643] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 36.373436][ T6643] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 36.383962][ T15] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.415783][ T15] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.467550][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.467581][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.482564][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.482593][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 1970/01/01 00:00:36 executed programs: 0 [ 36.695288][ T6643] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 36.696752][ T6643] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 36.698310][ T6643] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 36.699988][ T6643] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 36.701774][ T6643] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 36.751056][ T6659] chnl_net:caif_netlink_parms(): no params data found [ 36.772802][ T6659] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.774169][ T6659] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.775488][ T6659] bridge_slave_0: entered allmulticast mode [ 36.776964][ T6659] bridge_slave_0: entered promiscuous mode [ 36.779270][ T6659] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.780510][ T6659] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.781914][ T6659] bridge_slave_1: entered allmulticast mode [ 36.782387][ T6659] bridge_slave_1: entered promiscuous mode [ 36.790844][ T6659] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.792282][ T6659] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.799456][ T6659] team0: Port device team_slave_0 added [ 36.800547][ T6659] team0: Port device team_slave_1 added [ 36.807635][ T6659] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.807661][ T6659] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.807675][ T6659] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.808204][ T6659] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.808210][ T6659] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.808223][ T6659] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.826808][ T6659] hsr_slave_0: entered promiscuous mode [ 36.828165][ T6659] hsr_slave_1: entered promiscuous mode [ 36.829576][ T6659] debugfs: 'hsr0' already exists in 'hsr' [ 36.830729][ T6659] Cannot create hsr debugfs directory [ 38.741904][ T6643] Bluetooth: hci0: command tx timeout [ 39.351853][ T15] bridge_slave_1: left allmulticast mode [ 39.351889][ T15] bridge_slave_1: left promiscuous mode [ 39.352131][ T15] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.354641][ T15] bridge_slave_0: left allmulticast mode [ 39.354652][ T15] bridge_slave_0: left promiscuous mode [ 39.354782][ T15] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.484486][ T15] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 39.532539][ T15] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 39.552248][ T15] bond0 (unregistering): Released all slaves [ 39.617073][ T15] hsr_slave_0: left promiscuous mode [ 39.618565][ T15] hsr_slave_1: left promiscuous mode [ 39.619884][ T15] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 39.619918][ T15] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 39.624878][ T15] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 39.626146][ T15] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 39.631996][ T15] veth1_macvtap: left promiscuous mode [ 39.632876][ T15] veth0_macvtap: left promiscuous mode [ 39.632946][ T15] veth1_vlan: left promiscuous mode [ 39.633005][ T15] veth0_vlan: left promiscuous mode [ 39.750580][ T15] team0 (unregistering): Port device team_slave_1 removed [ 39.757050][ T15] team0 (unregistering): Port device team_slave_0 removed [ 40.059320][ T6659] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 40.069136][ T6659] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 40.071824][ T6659] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 40.074453][ T6659] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 40.097483][ T6659] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.117012][ T6659] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.124514][ T1948] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.124551][ T1948] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.126932][ T2370] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.126978][ T2370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.224003][ T6659] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.244212][ T6659] veth0_vlan: entered promiscuous mode [ 40.247903][ T6659] veth1_vlan: entered promiscuous mode [ 40.266483][ T6659] veth0_macvtap: entered promiscuous mode [ 40.268519][ T6659] veth1_macvtap: entered promiscuous mode [ 40.274943][ T6659] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.278011][ T6659] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.281158][ T2370] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.281196][ T2370] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.281216][ T2370] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.281228][ T2370] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.375083][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.375113][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.381014][ T2370] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.384041][ T2370] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.483050][ T6725] loop0: detected capacity change from 0 to 32768 [ 40.485295][ T6725] ======================================================= [ 40.485295][ T6725] WARNING: The mand mount option has been deprecated and [ 40.485295][ T6725] and is ignored by this kernel. Remove the mand [ 40.485295][ T6725] option from the mount to silence this warning. [ 40.485295][ T6725] ======================================================= [ 40.500742][ T6725] JBD2: Ignoring recovery information on journal [ 40.512078][ T6725] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 40.517875][ T6725] OCFS2: ERROR (device loop0): int ocfs2_xattr_find_entry(struct inode *, int, const char *, struct ocfs2_xattr_search *): corrupted xattr entries [ 40.518143][ T6725] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 40.518166][ T6725] OCFS2: File system is now read-only. [ 40.521760][ T6725] ================================================================== [ 40.521769][ T6725] BUG: KASAN: slab-use-after-free in ocfs2_listxattr+0x408/0xa74 [ 40.521784][ T6725] Read of size 1 at addr ffff0000e1a9f007 by task syz.0.17/6725 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 40.521790][ T6725] [ 40.521800][ T6725] CPU: 0 UID: 0 PID: 6725 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT [ 40.521807][ T6725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 40.521812][ T6725] Call trace: [ 40.521815][ T6725] show_stack+0x2c/0x3c (C) [ 40.521824][ T6725] __dump_stack+0x30/0x40 [ 40.521831][ T6725] dump_stack_lvl+0xd8/0x12c [ 40.521837][ T6725] print_address_description+0xa8/0x238 [ 40.521845][ T6725] print_report+0x68/0x84 [ 40.521851][ T6725] kasan_report+0xb0/0x110 [ 40.521858][ T6725] __asan_report_load1_noabort+0x20/0x2c [ 40.521864][ T6725] ocfs2_listxattr+0x408/0xa74 [ 40.521869][ T6725] vfs_listxattr+0xc0/0x128 [ 40.521874][ T6725] ovl_listxattr+0xd8/0x49c [ 40.521880][ T6725] listxattr+0x10c/0x380 [ 40.521885][ T6725] path_listxattrat+0x15c/0x33c [ 40.521890][ T6725] __arm64_sys_listxattr+0x84/0x98 [ 40.521895][ T6725] invoke_syscall+0x98/0x254 [ 40.521901][ T6725] el0_svc_common+0x130/0x23c [ 40.521905][ T6725] do_el0_svc+0x48/0x58 [ 40.521910][ T6725] el0_svc+0x5c/0x254 [ 40.521916][ T6725] el0t_64_sync_handler+0x84/0x12c [ 40.521922][ T6725] el0t_64_sync+0x198/0x19c [ 40.521928][ T6725] [ 40.521930][ T6725] Allocated by task 6520: [ 40.521933][ T6725] kasan_save_track+0x40/0x78 [ 40.521937][ T6725] kasan_save_alloc_info+0x44/0x54 [ 40.521942][ T6725] __kasan_slab_alloc+0x70/0x88 [ 40.521946][ T6725] kmem_cache_alloc_noprof+0x338/0x648 [ 40.521951][ T6725] __pmd_alloc+0xc0/0x860 [ 40.521956][ T6725] copy_pmd_range+0x5204/0x561c [ 40.521960][ T6725] copy_page_range+0x6a4/0xde4 [ 40.521966][ T6725] dup_mmap+0xc68/0x171c [ 40.521971][ T6725] copy_mm+0x100/0x438 [ 40.521975][ T6725] copy_process+0x1520/0x31e4 [ 40.521979][ T6725] kernel_clone+0x1d8/0x84c [ 40.521983][ T6725] __arm64_sys_clone+0x144/0x1a0 [ 40.521987][ T6725] invoke_syscall+0x98/0x254 [ 40.521991][ T6725] el0_svc_common+0x130/0x23c [ 40.521995][ T6725] do_el0_svc+0x48/0x58 [ 40.521998][ T6725] el0_svc+0x5c/0x254 [ 40.522003][ T6725] el0t_64_sync_handler+0x84/0x12c [ 40.522008][ T6725] el0t_64_sync+0x198/0x19c [ 40.522011][ T6725] [ 40.522012][ T6725] Freed by task 23: [ 40.522015][ T6725] kasan_save_track+0x40/0x78 [ 40.522019][ T6725] __kasan_save_free_info+0x58/0x70 [ 40.522024][ T6725] __kasan_slab_free+0x74/0xa4 [ 40.522027][ T6725] kmem_cache_free+0x18c/0x6dc [ 40.522031][ T6725] ptlock_free+0x54/0x6c [ 40.522035][ T6725] tlb_remove_table_rcu+0xe0/0x384 [ 40.522040][ T6725] rcu_core+0x840/0x17d0 [ 40.522046][ T6725] rcu_core_si+0x10/0x1c [ 40.522050][ T6725] handle_softirqs+0x328/0xc88 [ 40.522054][ T6725] run_ksoftirqd+0x70/0xc0 [ 40.522058][ T6725] smpboot_thread_fn+0x4d8/0x9cc [ 40.522064][ T6725] kthread+0x5fc/0x75c [ 40.522070][ T6725] ret_from_fork+0x10/0x20 [ 40.522074][ T6725] [ 40.522076][ T6725] The buggy address belongs to the object at ffff0000e1a9f000 [ 40.522076][ T6725] which belongs to the cache page->ptl of size 64 [ 40.522080][ T6725] The buggy address is located 7 bytes inside of [ 40.522080][ T6725] freed 64-byte region [ffff0000e1a9f000, ffff0000e1a9f040) [ 40.522085][ T6725] [ 40.522087][ T6725] The buggy address belongs to the physical page: [ 40.522091][ T6725] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff0000e1a9f720 pfn:0x121a9f [ 40.522096][ T6725] anon flags: 0x5ffc00000000000(node=0|zone=2|lastcpupid=0x7ff) [ 40.522102][ T6725] page_type: f5(slab) [ 40.522107][ T6725] raw: 05ffc00000000000 ffff0000c000b780 0000000000000000 0000000000000001 [ 40.522111][ T6725] raw: ffff0000e1a9f720 00000000002a0000 00000000f5000000 0000000000000000 [ 40.522114][ T6725] page dumped because: kasan: bad access detected [ 40.522116][ T6725] [ 40.522117][ T6725] Memory state around the buggy address: [ 40.522120][ T6725] ffff0000e1a9ef00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 40.522123][ T6725] ffff0000e1a9ef80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 40.522126][ T6725] >ffff0000e1a9f000: fa fb fb fb fb fb fb fb fc fc fc fc fa fb fb fb [ 40.522129][ T6725] ^ [ 40.522131][ T6725] ffff0000e1a9f080: fb fb fb fb fc fc fc fc fa fb fb fb fb fb fb fb [ 40.522134][ T6725] ffff0000e1a9f100: fc fc fc fc fa fb fb fb fb fb fb fb fc fc fc fc [ 40.522136][ T6725] ================================================================== [ 40.522139][ T6725] Disabling lock debugging due to kernel taint [ 40.530627][ T6659] ocfs2: Unmounting device (7,0) on (node local)