Warning: Permanently added '[localhost]:3843' (ED25519) to the list of known hosts. 2025/09/10 17:34:34 parsed 1 programs syzkaller login: [ 51.473234][ T5851] cgroup: Unknown subsys name 'net' [ 51.571481][ T5851] cgroup: Unknown subsys name 'cpuset' [ 51.576102][ T5851] cgroup: Unknown subsys name 'rlimit' [ 52.928873][ T5851] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 55.053746][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.056418][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.080837][ T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.083441][ T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.123942][ T5860] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 55.230096][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 55.233008][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 55.235758][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 55.240369][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 55.243200][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 56.117988][ T5900] chnl_net:caif_netlink_parms(): no params data found [ 56.344663][ T5900] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.347700][ T5900] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.352605][ T5900] bridge_slave_0: entered allmulticast mode [ 56.355349][ T5900] bridge_slave_0: entered promiscuous mode [ 56.381044][ T5900] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.383578][ T5900] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.385954][ T5900] bridge_slave_1: entered allmulticast mode [ 56.398259][ T5900] bridge_slave_1: entered promiscuous mode [ 56.434239][ T5900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.444419][ T5900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.477600][ T5900] team0: Port device team_slave_0 added [ 56.486965][ T5900] team0: Port device team_slave_1 added [ 56.564629][ T5900] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.566957][ T5900] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.578716][ T5900] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.586467][ T5900] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.590426][ T5900] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.601028][ T5900] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.661134][ T5900] hsr_slave_0: entered promiscuous mode [ 56.664001][ T5900] hsr_slave_1: entered promiscuous mode [ 56.854494][ T5900] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.860718][ T5900] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.865293][ T5900] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.879096][ T5900] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.895530][ T5900] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.898020][ T5900] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.900718][ T5900] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.903069][ T5900] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.934624][ T5900] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.951252][ T1091] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.954466][ T1091] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.962860][ T5900] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.970001][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.972371][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.981239][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.983606][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.083429][ T5900] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.111623][ T5900] veth0_vlan: entered promiscuous mode [ 57.116362][ T5900] veth1_vlan: entered promiscuous mode [ 57.134254][ T5900] veth0_macvtap: entered promiscuous mode [ 57.139268][ T5900] veth1_macvtap: entered promiscuous mode [ 57.147201][ T5900] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.153044][ T5900] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.160835][ T5936] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.164087][ T5936] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.168950][ T5936] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.172194][ T5936] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2025/09/10 17:34:41 executed programs: 0 [ 57.265773][ T5238] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 57.269530][ T5238] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 57.273505][ T5873] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 57.276715][ T5961] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 57.280993][ T5961] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 57.283827][ T5961] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 57.286130][ T5873] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 57.292978][ T5961] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 57.293529][ T5963] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 57.296462][ T5961] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 57.300183][ T5963] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 57.300723][ T5961] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 57.308220][ T5967] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 57.318140][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 57.321258][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 57.561666][ T5956] chnl_net:caif_netlink_parms(): no params data found [ 57.566570][ T5960] chnl_net:caif_netlink_parms(): no params data found [ 57.627518][ T5955] chnl_net:caif_netlink_parms(): no params data found [ 57.700765][ T5936] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.719125][ T5956] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.721613][ T5956] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.723901][ T5956] bridge_slave_0: entered allmulticast mode [ 57.726582][ T5956] bridge_slave_0: entered promiscuous mode [ 57.730660][ T5956] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.733040][ T5956] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.735544][ T5956] bridge_slave_1: entered allmulticast mode [ 57.739495][ T5956] bridge_slave_1: entered promiscuous mode [ 57.749755][ T5960] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.752773][ T5960] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.755288][ T5960] bridge_slave_0: entered allmulticast mode [ 57.758962][ T5960] bridge_slave_0: entered promiscuous mode [ 57.769706][ T5936] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.797365][ T5960] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.799829][ T5960] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.802205][ T5960] bridge_slave_1: entered allmulticast mode [ 57.804897][ T5960] bridge_slave_1: entered promiscuous mode [ 57.815206][ T5956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.831128][ T5956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.841629][ T5955] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.844173][ T5955] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.846536][ T5955] bridge_slave_0: entered allmulticast mode [ 57.849748][ T5955] bridge_slave_0: entered promiscuous mode [ 57.857740][ T5936] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.877492][ T5960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.881532][ T5956] team0: Port device team_slave_0 added [ 57.884026][ T5955] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.886374][ T5955] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.889415][ T5955] bridge_slave_1: entered allmulticast mode [ 57.892152][ T5955] bridge_slave_1: entered promiscuous mode [ 57.895709][ T5956] team0: Port device team_slave_1 added [ 57.908361][ T5960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.934315][ T5936] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.948268][ T5956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.950581][ T5956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.959016][ T5956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.971548][ T5955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.974853][ T5956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.977160][ T5956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.985838][ T5956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.999066][ T5955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.014354][ T5960] team0: Port device team_slave_0 added [ 58.034015][ T5960] team0: Port device team_slave_1 added [ 58.044294][ T5955] team0: Port device team_slave_0 added [ 58.064034][ T5956] hsr_slave_0: entered promiscuous mode [ 58.066444][ T5956] hsr_slave_1: entered promiscuous mode [ 58.069382][ T5956] debugfs: 'hsr0' already exists in 'hsr' [ 58.071339][ T5956] Cannot create hsr debugfs directory [ 58.074113][ T5955] team0: Port device team_slave_1 added [ 58.076691][ T5960] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.080147][ T5960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.088880][ T5960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.114199][ T5960] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.116514][ T5960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.125275][ T5960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.132155][ T5955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.134493][ T5955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.145655][ T5955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.150460][ T5955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.152762][ T5955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.163896][ T5955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.233036][ T5960] hsr_slave_0: entered promiscuous mode [ 58.235437][ T5960] hsr_slave_1: entered promiscuous mode [ 58.239459][ T5960] debugfs: 'hsr0' already exists in 'hsr' [ 58.242088][ T5960] Cannot create hsr debugfs directory [ 58.261220][ T5955] hsr_slave_0: entered promiscuous mode [ 58.263577][ T5955] hsr_slave_1: entered promiscuous mode [ 58.265753][ T5955] debugfs: 'hsr0' already exists in 'hsr' [ 58.268402][ T5955] Cannot create hsr debugfs directory [ 58.445213][ T5956] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 58.450384][ T5956] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 58.455347][ T5956] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 58.461978][ T5956] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 58.508087][ T5956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.519507][ T5956] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.524903][ T27] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.527487][ T27] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.535990][ T27] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.538441][ T27] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.633985][ T5956] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.656983][ T5956] veth0_vlan: entered promiscuous mode [ 58.664070][ T5956] veth1_vlan: entered promiscuous mode [ 58.680974][ T5956] veth0_macvtap: entered promiscuous mode [ 58.684820][ T5956] veth1_macvtap: entered promiscuous mode [ 58.694402][ T5956] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.700750][ T5956] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.707059][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.720497][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.726870][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.732559][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.757163][ T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.760172][ T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.777184][ T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.780742][ T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.358696][ T5873] Bluetooth: hci2: command tx timeout [ 59.358797][ T54] Bluetooth: hci0: command tx timeout [ 59.360989][ T5967] Bluetooth: hci1: command tx timeout [ 60.827862][ T5936] bridge_slave_1: left allmulticast mode [ 60.830206][ T5936] bridge_slave_1: left promiscuous mode [ 60.832595][ T5936] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.839910][ T5936] bridge_slave_0: left allmulticast mode [ 60.843339][ T5936] bridge_slave_0: left promiscuous mode [ 60.845417][ T5936] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.068261][ T5936] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 61.073142][ T5936] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 61.077013][ T5936] bond0 (unregistering): Released all slaves [ 61.212952][ T5936] hsr_slave_0: left promiscuous mode [ 61.215789][ T5936] hsr_slave_1: left promiscuous mode [ 61.220302][ T5936] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.223499][ T5936] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.230480][ T5936] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.233440][ T5936] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 61.242733][ T5936] veth1_macvtap: left promiscuous mode [ 61.244732][ T5936] veth0_macvtap: left promiscuous mode [ 61.246938][ T5936] veth1_vlan: left promiscuous mode [ 61.249616][ T5936] veth0_vlan: left promiscuous mode [ 61.439342][ T5873] Bluetooth: hci2: command tx timeout [ 61.441042][ T5967] Bluetooth: hci1: command tx timeout [ 61.447449][ T5967] Bluetooth: hci0: command tx timeout [ 61.473558][ T5936] team0 (unregistering): Port device team_slave_1 removed [ 61.492012][ T5936] team0 (unregistering): Port device team_slave_0 removed [ 61.865486][ T5955] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 61.880933][ T5955] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 61.889330][ T5955] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 61.894249][ T5955] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 61.976639][ T5960] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 61.981577][ T5960] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 61.991633][ T5960] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.002075][ T5960] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.898440][ T5955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.934439][ T5955] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.969620][ T27] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.972225][ T27] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.999942][ T27] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.002316][ T27] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.072081][ T5960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.111420][ T5960] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.132974][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.135669][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.182772][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.185733][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.218998][ T6146] ------------[ cut here ]------------ [ 63.221079][ T6146] ida_free called for id=1326 which is not allocated. [ 63.226618][ T6146] WARNING: CPU: 0 PID: 6146 at lib/idr.c:592 ida_free+0x280/0x310 [ 63.229783][ T6146] Modules linked in: [ 63.231244][ T6146] CPU: 0 UID: 0 PID: 6146 Comm: syz.1.60 Not tainted syzkaller #0 PREEMPT(full) [ 63.234872][ T6146] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 63.238453][ T6146] RIP: 0010:ida_free+0x280/0x310 [ 63.240239][ T6146] Code: 00 00 00 00 fc ff df 48 8b 5c 24 10 48 8b 7c 24 40 48 89 de e8 d1 8a 0c 00 90 48 c7 c7 80 ee ba 8c 44 89 fe e8 11 87 12 f6 90 <0f> 0b 90 90 eb 34 e8 95 02 4f f6 49 bd 00 00 00 00 00 fc ff df eb [ 63.243728][ T5960] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 63.247135][ T6146] RSP: 0018:ffffc9000302fba0 EFLAGS: 00010246 [ 63.253366][ T6146] RAX: c838d58ce4bb0000 RBX: 0000000000000a06 RCX: ffff88801eac0000 [ 63.255923][ T6146] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 63.257294][ T5960] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.258869][ T6146] RBP: ffffc9000302fca0 R08: ffff88804b024293 R09: 1ffff11009604852 [ 63.265599][ T6146] R10: dffffc0000000000 R11: ffffed1009604853 R12: 1ffff92000605f78 [ 63.269241][ T6146] R13: dffffc0000000000 R14: ffff888026c1fd00 R15: 000000000000052e [ 63.272563][ T6146] FS: 00007f6d7aab16c0(0000) GS:ffff8880b8613000(0000) knlGS:0000000000000000 [ 63.276275][ T6146] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 63.279556][ T6146] CR2: 0000200000004000 CR3: 000000002726e000 CR4: 00000000000006f0 [ 63.282367][ T6146] Call Trace: [ 63.283540][ T6146] [ 63.284575][ T6146] ? __pfx_ida_free+0x10/0x10 [ 63.286311][ T6146] ? __up_read+0x280/0x680 [ 63.287922][ T6146] ? copy_net_ns+0x326/0x510 [ 63.289796][ T6146] copy_net_ns+0x37a/0x510 [ 63.291662][ T6146] create_new_namespaces+0x3f3/0x720 [ 63.293651][ T6146] ? security_capable+0x7e/0x2e0 [ 63.295328][ T6146] unshare_nsproxy_namespaces+0x11c/0x170 [ 63.297276][ T6146] ksys_unshare+0x4c8/0x8c0 [ 63.299040][ T6146] ? __pfx_ksys_unshare+0x10/0x10 [ 63.300719][ T6146] ? rcu_is_watching+0x15/0xb0 [ 63.302301][ T6146] __x64_sys_unshare+0x38/0x50 [ 63.303857][ T6146] do_syscall_64+0xfa/0x3b0 [ 63.305349][ T6146] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.307646][ T6146] ? asm_sysvec_call_function_single+0x1a/0x20 [ 63.310214][ T6146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.312657][ T6146] RIP: 0033:0x7f6d79b8eba9 [ 63.314125][ T6146] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.315910][ T5955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.321078][ T6146] RSP: 002b:00007f6d7aab1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 63.321095][ T6146] RAX: ffffffffffffffda RBX: 00007f6d79dd5fa0 RCX: 00007f6d79b8eba9 [ 63.321101][ T6146] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 63.321105][ T6146] RBP: 00007f6d79c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 63.321110][ T6146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 63.321115][ T6146] R13: 00007f6d79dd6038 R14: 00007f6d79dd5fa0 R15: 00007ffd5ab830f8 [ 63.321125][ T6146] [ 63.321130][ T6146] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 63.321137][ T6146] CPU: 0 UID: 0 PID: 6146 Comm: syz.1.60 Not tainted syzkaller #0 PREEMPT(full) [ 63.321146][ T6146] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 63.321151][ T6146] Call Trace: [ 63.321155][ T6146] [ 63.321158][ T6146] dump_stack_lvl+0x99/0x250 [ 63.321169][ T6146] ? __asan_memcpy+0x40/0x70 [ 63.321179][ T6146] ? __pfx_dump_stack_lvl+0x10/0x10 [ 63.321187][ T6146] ? __pfx__printk+0x10/0x10 [ 63.321201][ T6146] vpanic+0x281/0x750 [ 63.321209][ T6146] ? __pfx__printk+0x10/0x10 [ 63.321223][ T6146] ? __pfx_vpanic+0x10/0x10 [ 63.321232][ T6146] ? is_bpf_text_address+0x26/0x2b0 [ 63.321246][ T6146] panic+0xb9/0xc0 [ 63.321254][ T6146] ? __pfx_panic+0x10/0x10 [ 63.321266][ T6146] __warn+0x31b/0x4b0 [ 63.321274][ T6146] ? ida_free+0x280/0x310 [ 63.321283][ T6146] ? ida_free+0x280/0x310 [ 63.321290][ T6146] report_bug+0x2be/0x4f0 [ 63.321298][ T6146] ? ida_free+0x280/0x310 [ 63.321305][ T6146] ? ida_free+0x280/0x310 [ 63.321312][ T6146] ? ida_free+0x282/0x310 [ 63.321319][ T6146] handle_bug+0x84/0x160 [ 63.321329][ T6146] exc_invalid_op+0x1a/0x50 [ 63.321338][ T6146] asm_exc_invalid_op+0x1a/0x20 [ 63.321345][ T6146] RIP: 0010:ida_free+0x280/0x310 [ 63.321353][ T6146] Code: 00 00 00 00 fc ff df 48 8b 5c 24 10 48 8b 7c 24 40 48 89 de e8 d1 8a 0c 00 90 48 c7 c7 80 ee ba 8c 44 89 fe e8 11 87 12 f6 90 <0f> 0b 90 90 eb 34 e8 95 02 4f f6 49 bd 00 00 00 00 00 fc ff df eb [ 63.321359][ T6146] RSP: 0018:ffffc9000302fba0 EFLAGS: 00010246 [ 63.321366][ T6146] RAX: c838d58ce4bb0000 RBX: 0000000000000a06 RCX: ffff88801eac0000 [ 63.321371][ T6146] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 63.321375][ T6146] RBP: ffffc9000302fca0 R08: ffff88804b024293 R09: 1ffff11009604852 [ 63.321380][ T6146] R10: dffffc0000000000 R11: ffffed1009604853 R12: 1ffff92000605f78 [ 63.321386][ T6146] R13: dffffc0000000000 R14: ffff888026c1fd00 R15: 000000000000052e [ 63.321397][ T6146] ? __pfx_ida_free+0x10/0x10 [ 63.321404][ T6146] ? __up_read+0x280/0x680 [ 63.321415][ T6146] ? copy_net_ns+0x326/0x510 [ 63.321424][ T6146] copy_net_ns+0x37a/0x510 [ 63.321433][ T6146] create_new_namespaces+0x3f3/0x720 [ 63.321446][ T6146] ? security_capable+0x7e/0x2e0 [ 63.321460][ T6146] unshare_nsproxy_namespaces+0x11c/0x170 [ 63.321468][ T6146] ksys_unshare+0x4c8/0x8c0 [ 63.321479][ T6146] ? __pfx_ksys_unshare+0x10/0x10 [ 63.321488][ T6146] ? rcu_is_watching+0x15/0xb0 [ 63.321499][ T6146] __x64_sys_unshare+0x38/0x50 [ 63.321508][ T6146] do_syscall_64+0xfa/0x3b0 [ 63.321516][ T6146] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.321523][ T6146] ? asm_sysvec_call_function_single+0x1a/0x20 [ 63.321532][ T6146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.321538][ T6146] RIP: 0033:0x7f6d79b8eba9 [ 63.321545][ T6146] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.321551][ T6146] RSP: 002b:00007f6d7aab1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 63.321558][ T6146] RAX: ffffffffffffffda RBX: 00007f6d79dd5fa0 RCX: 00007f6d79b8eba9 [ 63.321563][ T6146] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 63.321567][ T6146] RBP: 00007f6d79c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 63.321572][ T6146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 63.321576][ T6146] R13: 00007f6d79dd6038 R14: 00007f6d79dd5fa0 R15: 00007ffd5ab830f8 [ 63.321585][ T6146] [ 63.324127][ T6146] Kernel Offset: disabled VM DIAGNOSIS: 17:34:48 Registers: info registers vcpu 0 CPU#0 RAX=1ffffffff33bee60 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=0000000000000000 RDI=0000000000000020 RBP=ffffffff99df76b0 RSP=ffffc9000302f2f0 R8 =ffff888106cc0237 R9 =1ffff11020d98046 R10=dffffc0000000000 R11=ffffffff854f7470 R12=dffffc0000000000 R13=0000000000000000 R14=ffffffff99df7420 R15=0000000000000000 RIP=ffffffff854f74e7 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f6d7aab16c0 ffffffff 00c00000 GS =0000 ffff8880b8613000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000200000004000 CR3=000000002726e000 CR4=000006f0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525 XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000 XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f6d79c12e53 XMM06=0000000000000000 00007f6d79c12e4d XMM07=0000000000000000 00007f6d79c12e61 XMM08=0000000000000000 00007f6d79c12ee7 XMM09=0000000000000000 00007f6d79c12fc5 XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000 XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000 XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=ffffffff8b7369fb RBX=0000000000000002 RCX=ffff88810a3c3980 RDX=0000000000000000 RSI=00007fe5f094dfff RDI=000055a5fa7fbfff RBP=ffffc9000308f2f0 RSP=ffffc9000308f120 R8 =ffff88810a3c3980 R9 =0000000000000004 R10=0000000000000003 R11=0000000000000000 R12=ffff888107fe9c18 R13=000055a5fa7fbfff R14=00007fe5f094dfff R15=0000000000000001 RIP=ffffffff8b736a06 RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8881a3c13000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fe5f0944028 CR3=0000000107fda000 CR4=000006f0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=0000000000000000 0000000000000000 XMM01=ffffffffff000000 0000000000000000 XMM02=ffffffffffffffff ffffffffffffffff XMM03=ffffffffffffffff ffffffffffffffff XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000 XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000 XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000 XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000 XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000 XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000