Warning: Permanently added '[localhost]:37486' (ED25519) to the list of known hosts. 2026/02/26 07:04:04 parsed 1 programs syzkaller login: [ 88.687410][ T5302] cgroup: Unknown subsys name 'net' [ 88.739555][ T5302] cgroup: Unknown subsys name 'cpuset' [ 88.745402][ T5302] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 90.524027][ T5302] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 96.753459][ T5330] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 97.024028][ T10] cfg80211: failed to load regulatory.db [ 97.763452][ T1039] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.766916][ T1039] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.530048][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.533149][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.291533][ T5327] syz-executor (5327) used greatest stack depth: 17576 bytes left [ 99.697228][ T45] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 99.701610][ T45] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 99.705045][ T45] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 99.708408][ T45] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 99.712932][ T45] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 101.732282][ T4662] Bluetooth: hci0: command tx timeout [ 102.516321][ T5362] chnl_net:caif_netlink_parms(): no params data found [ 102.800764][ T5362] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.821874][ T5362] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.825078][ T5362] bridge_slave_0: entered allmulticast mode [ 102.850604][ T5362] bridge_slave_0: entered promiscuous mode [ 102.856590][ T5362] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.859709][ T5362] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.871472][ T5362] bridge_slave_1: entered allmulticast mode [ 102.882590][ T5362] bridge_slave_1: entered promiscuous mode [ 102.954111][ T5362] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.969831][ T5362] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.033160][ T5362] team0: Port device team_slave_0 added [ 103.037477][ T5362] team0: Port device team_slave_1 added [ 103.103969][ T5362] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.106960][ T5362] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.148577][ T5362] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.161455][ T5362] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.164416][ T5362] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.201236][ T5362] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.307101][ T5362] hsr_slave_0: entered promiscuous mode [ 103.321401][ T5362] hsr_slave_1: entered promiscuous mode [ 103.715392][ T5362] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 103.738506][ T5362] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 103.752422][ T5362] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 103.766455][ T5362] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 103.811227][ T4662] Bluetooth: hci0: command tx timeout [ 103.915952][ T5362] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.945792][ T5362] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.956877][ T3080] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.960014][ T3080] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.983691][ T3080] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.986910][ T3080] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.265663][ T5362] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.322838][ T5362] veth0_vlan: entered promiscuous mode [ 104.343530][ T5362] veth1_vlan: entered promiscuous mode [ 104.389527][ T5362] veth0_macvtap: entered promiscuous mode [ 104.404428][ T5362] veth1_macvtap: entered promiscuous mode [ 104.427184][ T5362] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.470281][ T5362] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.502226][ T3080] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.514503][ T3080] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.517816][ T3080] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.532814][ T3080] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/02/26 07:04:23 executed programs: 0 [ 104.865759][ T45] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 104.870063][ T45] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 104.873880][ T45] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 104.878305][ T45] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 104.882148][ T45] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 104.977079][ T4662] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 104.980685][ T4662] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 104.984447][ T4662] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 104.990862][ T4662] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 104.995523][ T4662] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 105.043036][ T5378] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 105.047456][ T5378] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 105.051373][ T5441] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 105.055046][ T5441] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 105.058249][ T5441] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 105.082068][ T4662] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 105.097432][ T4662] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 105.102222][ T4662] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 105.109142][ T4662] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 105.112673][ T4662] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 105.120504][ T4662] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 105.124126][ T5378] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 105.128027][ T4662] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 105.131539][ T5378] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 105.134813][ T4662] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 105.177219][ T45] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 105.241504][ T45] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 105.271061][ T45] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 105.281945][ T45] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 105.286491][ T45] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 105.639379][ T3080] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.912875][ T3080] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.285627][ T3080] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.892687][ T3080] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.933425][ T5445] Bluetooth: hci1: command tx timeout [ 106.941456][ T5435] chnl_net:caif_netlink_parms(): no params data found [ 107.012188][ T5445] Bluetooth: hci2: command tx timeout [ 107.092781][ T5445] Bluetooth: hci3: command tx timeout [ 107.174481][ T5445] Bluetooth: hci4: command tx timeout [ 107.177398][ T5445] Bluetooth: hci5: command tx timeout [ 107.316189][ T5435] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.319252][ T5435] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.323022][ T5435] bridge_slave_0: entered allmulticast mode [ 107.333147][ T5435] bridge_slave_0: entered promiscuous mode [ 107.347379][ T5435] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.350480][ T5435] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.361683][ T5435] bridge_slave_1: entered allmulticast mode [ 107.371491][ T5435] bridge_slave_1: entered promiscuous mode [ 107.412098][ T45] Bluetooth: hci6: command tx timeout [ 107.475768][ T5435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.552134][ T5435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.758993][ T5438] chnl_net:caif_netlink_parms(): no params data found [ 107.819141][ T5435] team0: Port device team_slave_0 added [ 107.928775][ T5435] team0: Port device team_slave_1 added [ 108.009971][ T5433] chnl_net:caif_netlink_parms(): no params data found [ 108.029430][ T5429] chnl_net:caif_netlink_parms(): no params data found [ 108.049223][ T5444] chnl_net:caif_netlink_parms(): no params data found [ 108.114615][ T5435] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.117965][ T5435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.141392][ T5435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.152184][ T5436] chnl_net:caif_netlink_parms(): no params data found [ 108.265578][ T5435] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.268513][ T5435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.292350][ T5435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.405526][ T3080] bridge_slave_1: left allmulticast mode [ 108.408327][ T3080] bridge_slave_1: left promiscuous mode [ 108.411620][ T3080] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.423014][ T3080] bridge_slave_0: left allmulticast mode [ 108.425440][ T3080] bridge_slave_0: left promiscuous mode [ 108.428034][ T3080] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.605900][ T3080] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 108.624025][ T3080] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 108.628667][ T3080] bond0 (unregistering): Released all slaves [ 108.761704][ T3080] hsr_slave_0: left promiscuous mode [ 108.764792][ T3080] hsr_slave_1: left promiscuous mode [ 108.767744][ T3080] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.770859][ T3080] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.775659][ T3080] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.778697][ T3080] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.788295][ T3080] veth1_macvtap: left promiscuous mode [ 108.790819][ T3080] veth0_macvtap: left promiscuous mode [ 108.793954][ T3080] veth1_vlan: left promiscuous mode [ 108.796403][ T3080] veth0_vlan: left promiscuous mode [ 109.006331][ T3080] team0 (unregistering): Port device team_slave_1 removed [ 109.011283][ T45] Bluetooth: hci1: command tx timeout [ 109.022457][ T3080] team0 (unregistering): Port device team_slave_0 removed [ 109.091843][ T45] Bluetooth: hci2: command tx timeout [ 109.137690][ T5435] hsr_slave_0: entered promiscuous mode [ 109.162171][ T5435] hsr_slave_1: entered promiscuous mode [ 109.177463][ T45] Bluetooth: hci3: command tx timeout [ 109.251578][ T45] Bluetooth: hci5: command tx timeout [ 109.253927][ T45] Bluetooth: hci4: command tx timeout [ 109.363604][ T5438] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.366522][ T5438] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.369778][ T5438] bridge_slave_0: entered allmulticast mode [ 109.392204][ T5438] bridge_slave_0: entered promiscuous mode [ 109.491414][ T5445] Bluetooth: hci6: command tx timeout [ 109.514231][ T5429] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.517180][ T5429] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.520138][ T5429] bridge_slave_0: entered allmulticast mode [ 109.537530][ T5429] bridge_slave_0: entered promiscuous mode [ 109.603442][ T5436] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.611401][ T5436] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.614595][ T5436] bridge_slave_0: entered allmulticast mode [ 109.634639][ T5436] bridge_slave_0: entered promiscuous mode [ 109.645594][ T5438] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.648529][ T5438] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.661947][ T5438] bridge_slave_1: entered allmulticast mode [ 109.671644][ T5438] bridge_slave_1: entered promiscuous mode [ 109.740538][ T5429] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.751700][ T5429] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.754903][ T5429] bridge_slave_1: entered allmulticast mode [ 109.761789][ T5429] bridge_slave_1: entered promiscuous mode [ 109.778168][ T5433] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.782479][ T5433] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.786633][ T5433] bridge_slave_0: entered allmulticast mode [ 109.801986][ T5433] bridge_slave_0: entered promiscuous mode [ 109.814184][ T5433] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.817478][ T5433] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.832032][ T5433] bridge_slave_1: entered allmulticast mode [ 109.841847][ T5433] bridge_slave_1: entered promiscuous mode [ 109.871796][ T5436] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.874790][ T5436] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.878045][ T5436] bridge_slave_1: entered allmulticast mode [ 109.895323][ T5436] bridge_slave_1: entered promiscuous mode [ 109.937429][ T5444] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.951323][ T5444] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.954621][ T5444] bridge_slave_0: entered allmulticast mode [ 109.958225][ T5444] bridge_slave_0: entered promiscuous mode [ 109.973083][ T5444] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.976151][ T5444] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.979405][ T5444] bridge_slave_1: entered allmulticast mode [ 109.992547][ T5444] bridge_slave_1: entered promiscuous mode [ 110.094818][ T5436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.111870][ T5436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.117901][ T5438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.133365][ T5438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.177532][ T5429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.277343][ T5444] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.313405][ T5429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.326329][ T5433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.333257][ T5436] team0: Port device team_slave_0 added [ 110.366243][ T5438] team0: Port device team_slave_0 added [ 110.370647][ T5438] team0: Port device team_slave_1 added [ 110.396113][ T5444] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.445768][ T5436] team0: Port device team_slave_1 added [ 110.449906][ T5433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.824752][ T5438] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.827813][ T5438] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.858294][ T5438] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.875802][ T5438] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.878834][ T5438] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.906451][ T5438] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.944761][ T5429] team0: Port device team_slave_0 added [ 110.952222][ T5433] team0: Port device team_slave_0 added [ 110.991790][ T5444] team0: Port device team_slave_0 added [ 110.998930][ T5429] team0: Port device team_slave_1 added [ 111.027139][ T5433] team0: Port device team_slave_1 added [ 111.030080][ T5436] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.033792][ T5436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.044804][ T5436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.062731][ T5444] team0: Port device team_slave_1 added [ 111.089213][ T5436] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.092607][ T5445] Bluetooth: hci1: command tx timeout [ 111.095265][ T5436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.106565][ T5436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.162053][ T5429] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.164943][ T5429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.176642][ T5445] Bluetooth: hci2: command tx timeout [ 111.191807][ T5429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.256930][ T5445] Bluetooth: hci3: command tx timeout [ 111.266953][ T5438] hsr_slave_0: entered promiscuous mode [ 111.275636][ T5438] hsr_slave_1: entered promiscuous mode [ 111.281400][ T5438] debugfs: 'hsr0' already exists in 'hsr' [ 111.283910][ T5438] Cannot create hsr debugfs directory [ 111.312855][ T5444] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.315893][ T5444] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.331268][ T5445] Bluetooth: hci4: command tx timeout [ 111.333732][ T5445] Bluetooth: hci5: command tx timeout [ 111.348547][ T5444] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.371582][ T5429] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.374540][ T5429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.411616][ T5429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.417676][ T5433] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.420873][ T5433] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.452608][ T5433] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.514647][ T5444] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.517673][ T5444] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.529377][ T5444] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.558816][ T5433] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.562040][ T5433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.574097][ T45] Bluetooth: hci6: command tx timeout [ 111.576817][ T5433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.586006][ T5436] hsr_slave_0: entered promiscuous mode [ 111.589435][ T5436] hsr_slave_1: entered promiscuous mode [ 111.592492][ T5436] debugfs: 'hsr0' already exists in 'hsr' [ 111.594629][ T5436] Cannot create hsr debugfs directory [ 111.656635][ T5429] hsr_slave_0: entered promiscuous mode [ 111.663404][ T5429] hsr_slave_1: entered promiscuous mode [ 111.665916][ T5429] debugfs: 'hsr0' already exists in 'hsr' [ 111.667989][ T5429] Cannot create hsr debugfs directory [ 111.722721][ T5435] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 111.824702][ T5435] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 111.862768][ T5444] hsr_slave_0: entered promiscuous mode [ 111.866212][ T5444] hsr_slave_1: entered promiscuous mode [ 111.869305][ T5444] debugfs: 'hsr0' already exists in 'hsr' [ 111.875185][ T5444] Cannot create hsr debugfs directory [ 111.894870][ T5433] hsr_slave_0: entered promiscuous mode [ 111.898293][ T5433] hsr_slave_1: entered promiscuous mode [ 111.912512][ T5433] debugfs: 'hsr0' already exists in 'hsr' [ 111.914983][ T5433] Cannot create hsr debugfs directory [ 111.976378][ T5435] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 111.984802][ T5435] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 112.615614][ T5438] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 112.642369][ T5438] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 112.689128][ T5438] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 112.702150][ T5438] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 112.734939][ T5435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.778473][ T5435] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.795967][ T5436] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 112.819050][ T5436] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 112.884817][ T5436] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 112.893111][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.896298][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.908113][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.911168][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.936350][ T5436] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 113.142212][ T5429] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 113.147990][ T5429] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 113.176123][ T45] Bluetooth: hci1: command tx timeout [ 113.213302][ T5429] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 113.252623][ T45] Bluetooth: hci2: command tx timeout [ 113.331929][ T45] Bluetooth: hci3: command tx timeout [ 113.339230][ T5429] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 113.374060][ T5438] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.411218][ T45] Bluetooth: hci5: command tx timeout [ 113.413555][ T45] Bluetooth: hci4: command tx timeout [ 113.459410][ T5438] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.555509][ T3080] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.558388][ T3080] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.582751][ T3080] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.585882][ T3080] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.651450][ T5445] Bluetooth: hci6: command tx timeout [ 113.720517][ T5436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.834912][ T5438] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 113.915779][ T5435] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.010795][ T5436] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.193105][ T5429] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.207058][ T5435] veth0_vlan: entered promiscuous mode [ 114.218342][ T3080] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.221464][ T3080] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.256933][ T5433] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 114.315071][ T3080] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.318265][ T3080] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.353151][ T5433] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 114.364482][ T5433] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 114.404202][ T5435] veth1_vlan: entered promiscuous mode [ 114.484190][ T5433] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 114.550153][ T5429] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.558502][ T5436] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 114.648267][ T5438] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.739262][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.742494][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.774060][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.777112][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.794284][ T5435] veth0_macvtap: entered promiscuous mode [ 114.799696][ T5435] veth1_macvtap: entered promiscuous mode [ 114.997893][ T5435] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.209940][ T5435] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.248041][ T5444] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 115.351199][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.355647][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.359417][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.404274][ T5444] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 115.462938][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.495694][ T5444] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 115.524915][ T5444] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 115.640843][ T5436] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.760008][ T5429] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.926088][ T5433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.043541][ T30] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.047130][ T30] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.093795][ T5438] veth0_vlan: entered promiscuous mode [ 116.107042][ T5429] veth0_vlan: entered promiscuous mode [ 116.163453][ T5433] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.198521][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.211719][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.222374][ T5438] veth1_vlan: entered promiscuous mode [ 116.248841][ T5436] veth0_vlan: entered promiscuous mode [ 116.280334][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.283702][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.308236][ T5429] veth1_vlan: entered promiscuous mode [ 116.336139][ T5436] veth1_vlan: entered promiscuous mode [ 116.368108][ T5444] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.404072][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.407297][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.504959][ T5642] loop0: detected capacity change from 0 to 1024 2026/02/26 07:04:35 executed programs: 12 [ 116.540343][ T5438] veth0_macvtap: entered promiscuous mode [ 116.547878][ T5642] ======================================================= [ 116.547878][ T5642] WARNING: The mand mount option has been deprecated and [ 116.547878][ T5642] and is ignored by this kernel. Remove the mand [ 116.547878][ T5642] option from the mount to silence this warning. [ 116.547878][ T5642] ======================================================= [ 116.575789][ T5444] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.641718][ T5642] EXT4-fs: Ignoring removed bh option [ 116.658368][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.661146][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.694952][ T5642] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.717482][ T5438] veth1_macvtap: entered promiscuous mode [ 116.746389][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.749307][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.810492][ T5438] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.838080][ T5436] veth0_macvtap: entered promiscuous mode [ 116.859028][ T5429] veth0_macvtap: entered promiscuous mode [ 116.884162][ T5642] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4222: comm syz.0.17: Allocating blocks 497-513 which overlap fs metadata [ 116.963874][ T5642] EXT4-fs (loop0): pa ffff88804b037cb0: logic 64, phys. 193, len 20 [ 116.967568][ T5642] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 1 [ 116.980156][ T5438] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.003784][ T5436] veth1_macvtap: entered promiscuous mode [ 117.013910][ T5429] veth1_macvtap: entered promiscuous mode [ 117.048819][ T42] ================================================================== [ 117.052605][ T42] BUG: KASAN: slab-out-of-bounds in ext4_find_extent+0xaea/0xcc0 [ 117.056079][ T42] Read of size 4 at addr ffff8880444e0c94 by task kworker/u4:3/42 [ 117.060353][ T42] [ 117.061439][ T42] CPU: 0 UID: 0 PID: 42 Comm: kworker/u4:3 Not tainted syzkaller #0 PREEMPT(full) [ 117.061452][ T42] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 117.061462][ T42] Workqueue: writeback wb_workfn (flush-7:0) [ 117.061486][ T42] Call Trace: [ 117.061494][ T42] [ 117.061501][ T42] dump_stack_lvl+0xe8/0x150 [ 117.061517][ T42] print_report+0xba/0x230 [ 117.061529][ T42] ? ext4_find_extent+0xaea/0xcc0 [ 117.061542][ T42] kasan_report+0x117/0x150 [ 117.061553][ T42] ? ext4_find_extent+0xaea/0xcc0 [ 117.061564][ T42] ext4_find_extent+0xaea/0xcc0 [ 117.061578][ T42] ext4_ext_map_blocks+0x283/0x58b0 [ 117.061588][ T42] ? ret_from_fork_asm+0x1a/0x30 [ 117.061604][ T42] ? check_path+0x21/0x40 [ 117.061627][ T42] ? lockdep_unlock+0x5d/0xd0 [ 117.061638][ T42] ? __lock_acquire+0x146e/0x2cf0 [ 117.061652][ T42] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 117.061675][ T42] ext4_map_create_blocks+0x11d/0x540 [ 117.061690][ T42] ext4_map_blocks+0x7cd/0x11d0 [ 117.061704][ T42] ? __pfx_ext4_map_blocks+0x10/0x10 [ 117.061723][ T42] ? ext4_inode_journal_mode+0x193/0x470 [ 117.061740][ T42] ext4_do_writepages+0x22c0/0x46e0 [ 117.061763][ T42] ? __pfx_ext4_do_writepages+0x10/0x10 [ 117.061774][ T42] ? lockdep_unlock+0x5d/0xd0 [ 117.061784][ T42] ? __lock_acquire+0x146e/0x2cf0 [ 117.061795][ T42] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 117.062875][ T42] ext4_writepages+0x241/0x3b0 [ 117.062889][ T42] ? __pfx_ext4_writepages+0x10/0x10 [ 117.062903][ T42] ? do_raw_spin_unlock+0x4d/0x210 [ 117.062912][ T42] ? __pfx_ext4_writepages+0x10/0x10 [ 117.062922][ T42] do_writepages+0x32e/0x550 [ 117.062936][ T42] ? reacquire_held_locks+0x104/0x190 [ 117.062950][ T42] ? writeback_sb_inodes+0x477/0x1a20 [ 117.062967][ T42] __writeback_single_inode+0x133/0x11a0 [ 117.062977][ T42] ? do_raw_spin_unlock+0x4d/0x210 [ 117.062991][ T42] writeback_sb_inodes+0x992/0x1a20 [ 117.063008][ T42] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 117.063021][ T42] ? do_raw_spin_lock+0x12b/0x2f0 [ 117.063037][ T42] ? rcu_is_watching+0x15/0xb0 [ 117.063053][ T42] wb_writeback+0x456/0xb70 [ 117.063064][ T42] ? queue_io+0x1e1/0x4a0 [ 117.063076][ T42] ? __pfx_wb_writeback+0x10/0x10 [ 117.063085][ T42] ? do_raw_spin_lock+0x12b/0x2f0 [ 117.063096][ T42] wb_workfn+0x414/0xf50 [ 117.063111][ T42] ? look_up_lock_class+0x57/0x110 [ 117.063127][ T42] ? __pfx_wb_workfn+0x10/0x10 [ 117.063140][ T42] ? do_raw_spin_lock+0x12b/0x2f0 [ 117.063150][ T42] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 117.063164][ T42] ? process_scheduled_works+0xa25/0x1830 [ 117.063178][ T42] ? process_scheduled_works+0xa25/0x1830 [ 117.063190][ T42] process_scheduled_works+0xb02/0x1830 [ 117.063206][ T42] ? __pfx_process_scheduled_works+0x10/0x10 [ 117.063220][ T42] ? assign_work+0x3d5/0x5e0 [ 117.063237][ T42] worker_thread+0xa50/0xfc0 [ 117.063256][ T42] kthread+0x388/0x470 [ 117.063266][ T42] ? __pfx_worker_thread+0x10/0x10 [ 117.063278][ T42] ? __pfx_kthread+0x10/0x10 [ 117.063286][ T42] ret_from_fork+0x51e/0xb90 [ 117.063301][ T42] ? __pfx_ret_from_fork+0x10/0x10 [ 117.063312][ T42] ? __switch_to+0xc7d/0x1450 [ 117.063324][ T42] ? __pfx_kthread+0x10/0x10 [ 117.063333][ T42] ret_from_fork_asm+0x1a/0x30 [ 117.063350][ T42] [ 117.063354][ T42] [ 117.202410][ T42] Allocated by task 4713: [ 117.204395][ T42] kasan_save_track+0x3e/0x80 [ 117.206411][ T42] __kasan_slab_alloc+0x6c/0x80 [ 117.208494][ T42] kmem_cache_alloc_lru_noprof+0x2b8/0x640 [ 117.210910][ T42] shmem_alloc_inode+0x28/0x40 [ 117.212941][ T42] alloc_inode+0x6a/0x1b0 [ 117.214836][ T42] new_inode+0x22/0x170 [ 117.216666][ T42] shmem_get_inode+0x347/0xe60 [ 117.218819][ T42] shmem_mknod+0x191/0x360 [ 117.220655][ T42] path_openat+0x1395/0x3860 [ 117.222453][ T42] do_file_open+0x23e/0x4a0 [ 117.224277][ T42] do_sys_openat2+0x113/0x200 [ 117.226077][ T42] __x64_sys_openat+0x138/0x170 [ 117.228070][ T42] do_syscall_64+0x14d/0xf80 [ 117.229958][ T42] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.232287][ T42] [ 117.233289][ T42] The buggy address belongs to the object at ffff8880444e0678 [ 117.233289][ T42] which belongs to the cache shmem_inode_cache of size 1528 [ 117.239382][ T42] The buggy address is located 36 bytes to the right of [ 117.239382][ T42] allocated 1528-byte region [ffff8880444e0678, ffff8880444e0c70) [ 117.245502][ T42] [ 117.246567][ T42] The buggy address belongs to the physical page: [ 117.249350][ T42] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x444e0 [ 117.253076][ T42] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 117.256547][ T42] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 117.259900][ T42] page_type: f5(slab) [ 117.261580][ T42] raw: 04fff00000000040 ffff88801c2aaa00 dead000000000100 dead000000000122 [ 117.265243][ T42] raw: 0000000000000000 0000000000130013 00000000f5000000 0000000000000000 [ 117.268841][ T42] head: 04fff00000000040 ffff88801c2aaa00 dead000000000100 dead000000000122 [ 117.272448][ T42] head: 0000000000000000 0000000000130013 00000000f5000000 0000000000000000 [ 117.276089][ T42] head: 04fff00000000003 ffffea0001113801 00000000ffffffff 00000000ffffffff [ 117.279899][ T42] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 117.283580][ T42] page dumped because: kasan: bad access detected [ 117.286252][ T42] page_owner tracks the page as allocated [ 117.288611][ T42] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4721, tgid 4721 (udevd), ts 54986916466, free_ts 54986279663 [ 117.297046][ T42] post_alloc_hook+0x231/0x280 [ 117.299253][ T42] get_page_from_freelist+0x24dc/0x2580 [ 117.301679][ T42] __alloc_frozen_pages_noprof+0x18d/0x380 [ 117.304088][ T42] allocate_slab+0x77/0x660 [ 117.306012][ T42] refill_objects+0x331/0x3c0 [ 117.308153][ T42] __pcs_replace_empty_main+0x2b9/0x620 [ 117.310523][ T42] kmem_cache_alloc_lru_noprof+0x37c/0x640 [ 117.313064][ T42] shmem_alloc_inode+0x28/0x40 [ 117.315148][ T42] alloc_inode+0x6a/0x1b0 [ 117.317037][ T42] new_inode+0x22/0x170 [ 117.318814][ T42] shmem_get_inode+0x347/0xe60 [ 117.321027][ T42] shmem_mknod+0x191/0x360 [ 117.322934][ T42] path_openat+0x1395/0x3860 [ 117.324928][ T42] do_file_open+0x23e/0x4a0 [ 117.326871][ T42] do_sys_openat2+0x113/0x200 [ 117.328977][ T42] __x64_sys_openat+0x138/0x170 [ 117.331133][ T42] page last free pid 4721 tgid 4721 stack trace: [ 117.333958][ T42] __free_frozen_pages+0xc2b/0xdb0 [ 117.336329][ T42] __slab_free+0x263/0x2b0 [ 117.338443][ T42] qlist_free_all+0x97/0x100 [ 117.340463][ T42] kasan_quarantine_reduce+0x148/0x160 [ 117.342866][ T42] __kasan_slab_alloc+0x22/0x80 [ 117.345103][ T42] __kmalloc_cache_noprof+0x2ba/0x660 [ 117.347522][ T42] kernfs_fop_open+0x397/0xca0 [ 117.349658][ T42] do_dentry_open+0x785/0x14e0 [ 117.351845][ T42] vfs_open+0x3b/0x340 [ 117.353672][ T42] path_openat+0x2e08/0x3860 [ 117.355709][ T42] do_file_open+0x23e/0x4a0 [ 117.357660][ T42] do_sys_openat2+0x113/0x200 [ 117.359774][ T42] __x64_sys_openat+0x138/0x170 [ 117.361842][ T42] do_syscall_64+0x14d/0xf80 [ 117.364055][ T42] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.366748][ T42] [ 117.367852][ T42] Memory state around the buggy address: [ 117.370250][ T42] ffff8880444e0b80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 117.373600][ T42] ffff8880444e0c00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc [ 117.376916][ T42] >ffff8880444e0c80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc 00 00 [ 117.380164][ T42] ^ [ 117.382127][ T42] ffff8880444e0d00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 117.385491][ T42] ffff8880444e0d80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 117.388871][ T42] ================================================================== [ 117.645782][ T5429] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.667093][ T5429] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.727831][ T5436] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.736774][ T144] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.748333][ T144] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.790648][ T5436] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.795432][ T144] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.854707][ T144] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.858300][ T144] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.912153][ T5433] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.945377][ T144] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.020843][ T144] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.032547][ T144] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.074462][ T42] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 118.077492][ T42] CPU: 0 UID: 0 PID: 42 Comm: kworker/u4:3 Not tainted syzkaller #0 PREEMPT(full) [ 118.081273][ T42] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 118.085352][ T42] Workqueue: writeback wb_workfn (flush-7:0) [ 118.087951][ T42] Call Trace: [ 118.089351][ T42] [ 118.090601][ T42] vpanic+0x56c/0xa60 [ 118.092324][ T42] ? __pfx_vpanic+0x10/0x10 [ 118.094149][ T42] panic+0xc5/0xd0 [ 118.095786][ T42] ? __pfx_panic+0x10/0x10 [ 118.097697][ T42] ? preempt_schedule_thunk+0x16/0x30 [ 118.099965][ T42] ? preempt_schedule_thunk+0x16/0x30 [ 118.102250][ T42] ? ext4_find_extent+0xaea/0xcc0 [ 118.104284][ T42] check_panic_on_warn+0x89/0xb0 [ 118.106360][ T42] ? ext4_find_extent+0xaea/0xcc0 [ 118.108574][ T42] end_report+0x73/0x180 [ 118.110391][ T42] ? ext4_find_extent+0xaea/0xcc0 [ 118.112581][ T42] kasan_report+0x128/0x150 [ 118.114672][ T42] ? ext4_find_extent+0xaea/0xcc0 [ 118.117073][ T42] ext4_find_extent+0xaea/0xcc0 [ 118.119268][ T42] ext4_ext_map_blocks+0x283/0x58b0 [ 118.121462][ T42] ? ret_from_fork_asm+0x1a/0x30 [ 118.123357][ T42] ? check_path+0x21/0x40 [ 118.125171][ T42] ? lockdep_unlock+0x5d/0xd0 [ 118.127067][ T42] ? __lock_acquire+0x146e/0x2cf0 [ 118.129054][ T42] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 118.131266][ T42] ext4_map_create_blocks+0x11d/0x540 [ 118.133378][ T42] ext4_map_blocks+0x7cd/0x11d0 [ 118.135306][ T42] ? __pfx_ext4_map_blocks+0x10/0x10 [ 118.137686][ T42] ? ext4_inode_journal_mode+0x193/0x470 [ 118.140224][ T42] ext4_do_writepages+0x22c0/0x46e0 [ 118.142522][ T42] ? __pfx_ext4_do_writepages+0x10/0x10 [ 118.144760][ T42] ? lockdep_unlock+0x5d/0xd0 [ 118.146791][ T42] ? __lock_acquire+0x146e/0x2cf0 [ 118.149030][ T42] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 118.151462][ T42] ext4_writepages+0x241/0x3b0 [ 118.153344][ T42] ? __pfx_ext4_writepages+0x10/0x10 [ 118.155554][ T42] ? do_raw_spin_unlock+0x4d/0x210 [ 118.157706][ T42] ? __pfx_ext4_writepages+0x10/0x10 [ 118.160005][ T42] do_writepages+0x32e/0x550 [ 118.161884][ T42] ? reacquire_held_locks+0x104/0x190 [ 118.163981][ T42] ? writeback_sb_inodes+0x477/0x1a20 [ 118.166041][ T42] __writeback_single_inode+0x133/0x11a0 [ 118.168215][ T42] ? do_raw_spin_unlock+0x4d/0x210 [ 118.170190][ T42] writeback_sb_inodes+0x992/0x1a20 [ 118.172370][ T42] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 118.174989][ T42] ? do_raw_spin_lock+0x12b/0x2f0 [ 118.177182][ T42] ? rcu_is_watching+0x15/0xb0 [ 118.179896][ T42] wb_writeback+0x456/0xb70 [ 118.182366][ T42] ? queue_io+0x1e1/0x4a0 [ 118.184513][ T42] ? __pfx_wb_writeback+0x10/0x10 [ 118.186887][ T42] ? do_raw_spin_lock+0x12b/0x2f0 [ 118.189303][ T42] wb_workfn+0x414/0xf50 [ 118.191266][ T42] ? look_up_lock_class+0x57/0x110 [ 118.193293][ T42] ? __pfx_wb_workfn+0x10/0x10 [ 118.195399][ T42] ? do_raw_spin_lock+0x12b/0x2f0 [ 118.197570][ T42] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 118.199769][ T42] ? process_scheduled_works+0xa25/0x1830 [ 118.202181][ T42] ? process_scheduled_works+0xa25/0x1830 [ 118.204601][ T42] process_scheduled_works+0xb02/0x1830 [ 118.207085][ T42] ? __pfx_process_scheduled_works+0x10/0x10 [ 118.209526][ T42] ? assign_work+0x3d5/0x5e0 [ 118.211385][ T42] worker_thread+0xa50/0xfc0 [ 118.213271][ T42] kthread+0x388/0x470 [ 118.214960][ T42] ? __pfx_worker_thread+0x10/0x10 [ 118.217128][ T42] ? __pfx_kthread+0x10/0x10 [ 118.219133][ T42] ret_from_fork+0x51e/0xb90 [ 118.221121][ T42] ? __pfx_ret_from_fork+0x10/0x10 [ 118.223224][ T42] ? __switch_to+0xc7d/0x1450 [ 118.225223][ T42] ? __pfx_kthread+0x10/0x10 [ 118.227177][ T42] ret_from_fork_asm+0x1a/0x30 [ 118.229359][ T42] [ 118.231147][ T42] Kernel Offset: disabled [ 118.233048][ T42] Rebooting in 86400 seconds.. VM DIAGNOSIS: 07:04:35 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8 RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900004461b0 R8 =ffff888034f60237 R9 =1ffff110069ec046 R10=dffffc0000000000 R11=ffffffff854181b0 R12=dffffc0000000000 R13=ffffffff9a2bda66 R14=ffffffff9a5d5c60 R15=0000000000000000 RIP=ffffffff8541822c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88808ca59000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055f5a378ae20 CR3=0000000034a11000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000040008000 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d00000000000000 00000000000080fe ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000080 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0e24c33199 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0e24c33191 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0e24c3319f ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0e24c331df ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0e24c33343 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0e24c331d1 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6200305f6576616c 735f766461746162 007664617461625f 6f745f3168746576 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c6c255b20642523 00202c0028732520 3e2d205d736d756c 6c255b2064252300 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4949005b05410006 000509000d560005 1b08055d56485049 49005b0541000600 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0e24deb5f8 00007f0e24deb5c8 00007f0e24deb600 00007f0e24deb5e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000