Warning: Permanently added '10.128.10.11' (ED25519) to the list of known hosts. 2026/01/15 09:03:29 parsed 1 programs [ 70.896518][ T4188] cgroup: Unknown subsys name 'net' [ 71.011435][ T4188] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.487470][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.494090][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.594987][ T4188] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 75.966198][ T3081] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.983942][ T3081] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.999427][ T4247] chnl_net:caif_netlink_parms(): no params data found [ 76.039381][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.086144][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.116514][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.162603][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.215120][ T4247] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.232580][ T4247] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.271272][ T4247] device bridge_slave_0 entered promiscuous mode [ 76.320548][ T4247] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.334569][ T4247] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.343072][ T4247] device bridge_slave_1 entered promiscuous mode [ 76.387719][ T4247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.409884][ T4247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.447693][ T4247] team0: Port device team_slave_0 added [ 76.457800][ T4247] team0: Port device team_slave_1 added [ 76.486544][ T4247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.493898][ T4247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.521640][ T4247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.535557][ T4247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.542560][ T4247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.571974][ T4247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.618216][ T4247] device hsr_slave_0 entered promiscuous mode [ 76.625430][ T4247] device hsr_slave_1 entered promiscuous mode [ 76.777986][ T4247] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 76.792888][ T4247] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 76.803315][ T4247] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 76.815892][ T4247] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 76.904316][ T4247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.920697][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.929872][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.943083][ T4247] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.956457][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.968900][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.979428][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.986821][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.009448][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 77.019942][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 77.029196][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.039895][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.047041][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.061238][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.070469][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.097558][ T4247] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 77.108048][ T4247] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.120501][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 77.131600][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 77.140856][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 77.151298][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 77.160790][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 77.169976][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.182247][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 77.191407][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.205217][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 77.213391][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 77.339565][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.347772][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.363269][ T4247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.385551][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.396125][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.422897][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.433388][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.443107][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.451314][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.461676][ T4247] device veth0_vlan entered promiscuous mode [ 77.476289][ T4247] device veth1_vlan entered promiscuous mode [ 77.499519][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 77.507906][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 77.517312][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.529438][ T4247] device veth0_macvtap entered promiscuous mode [ 77.542784][ T4247] device veth1_macvtap entered promiscuous mode [ 77.562955][ T4247] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.579063][ T4247] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.587597][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.597043][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.606303][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.616389][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.626015][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.655555][ T4247] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.666669][ T4247] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.676280][ T4247] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.686550][ T4247] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/01/15 09:03:38 executed programs: 0 [ 77.993381][ T4247] syz-executor (4247) used greatest stack depth: 20936 bytes left [ 78.543380][ T4316] chnl_net:caif_netlink_parms(): no params data found [ 78.642467][ T4305] chnl_net:caif_netlink_parms(): no params data found [ 78.778175][ T4316] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.785842][ T4316] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.794726][ T4316] device bridge_slave_0 entered promiscuous mode [ 78.806960][ T4316] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.814451][ T4316] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.822512][ T4316] device bridge_slave_1 entered promiscuous mode [ 78.870068][ T4308] chnl_net:caif_netlink_parms(): no params data found [ 78.922610][ T4306] chnl_net:caif_netlink_parms(): no params data found [ 78.941317][ T4316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.954777][ T4305] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.961886][ T4305] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.970220][ T4305] device bridge_slave_0 entered promiscuous mode [ 78.979314][ T4305] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.987188][ T4305] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.995451][ T4305] device bridge_slave_1 entered promiscuous mode [ 79.027727][ T4316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.037172][ T4318] chnl_net:caif_netlink_parms(): no params data found [ 79.124920][ T4316] team0: Port device team_slave_0 added [ 79.163001][ T4305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.186939][ T4316] team0: Port device team_slave_1 added [ 79.218985][ T4305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.240067][ T4308] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.247370][ T4308] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.262010][ T4308] device bridge_slave_0 entered promiscuous mode [ 79.304912][ T4316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.312049][ T4316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.339801][ T4316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.353499][ T4308] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.363990][ T4308] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.371936][ T4308] device bridge_slave_1 entered promiscuous mode [ 79.380906][ T4306] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.390972][ T4306] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.399543][ T4306] device bridge_slave_0 entered promiscuous mode [ 79.426736][ T4316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.434711][ T4316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.461454][ T4316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.481451][ T4306] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.489210][ T4306] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.498066][ T4306] device bridge_slave_1 entered promiscuous mode [ 79.506452][ T4318] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.513902][ T4318] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.522090][ T4318] device bridge_slave_0 entered promiscuous mode [ 79.533854][ T4305] team0: Port device team_slave_0 added [ 79.541374][ T4318] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.549032][ T4318] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.557673][ T4318] device bridge_slave_1 entered promiscuous mode [ 79.598787][ T4305] team0: Port device team_slave_1 added [ 79.630756][ T4308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.649413][ T4305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.656779][ T4305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.683536][ T4305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.706104][ T4318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.718367][ T4308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.730830][ T4306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.741152][ T4305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.749831][ T4305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.776725][ T4305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.790275][ T4318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.819945][ T4306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.859188][ T4316] device hsr_slave_0 entered promiscuous mode [ 79.866554][ T4316] device hsr_slave_1 entered promiscuous mode [ 79.873197][ T4316] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.881559][ T4316] Cannot create hsr debugfs directory [ 79.944496][ T4318] team0: Port device team_slave_0 added [ 79.953403][ T4308] team0: Port device team_slave_0 added [ 79.971433][ T4306] team0: Port device team_slave_0 added [ 79.989260][ T4318] team0: Port device team_slave_1 added [ 79.997650][ T4308] team0: Port device team_slave_1 added [ 80.020661][ T4306] team0: Port device team_slave_1 added [ 80.057518][ T4305] device hsr_slave_0 entered promiscuous mode [ 80.064625][ T4305] device hsr_slave_1 entered promiscuous mode [ 80.071356][ T4305] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.079641][ T4305] Cannot create hsr debugfs directory [ 80.109178][ T4318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.116608][ T4318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.127133][ T4276] Bluetooth: hci0: command 0x0409 tx timeout [ 80.143363][ T4291] Bluetooth: hci2: command 0x0409 tx timeout [ 80.152481][ T4276] Bluetooth: hci1: command 0x0409 tx timeout [ 80.157278][ T4318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.177583][ T4306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.186693][ T4306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.204744][ T4276] Bluetooth: hci3: command 0x0409 tx timeout [ 80.215668][ T4306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.230955][ T4308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.238541][ T4308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.265046][ T4308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.283893][ T4276] Bluetooth: hci4: command 0x0409 tx timeout [ 80.303623][ T4318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.310693][ T4318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.337551][ T4318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.349863][ T4306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.357513][ T4306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.384573][ T4306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.396755][ T4308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.404014][ T4308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.430572][ T4308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.560305][ T4306] device hsr_slave_0 entered promiscuous mode [ 80.567919][ T4306] device hsr_slave_1 entered promiscuous mode [ 80.575330][ T4306] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.583058][ T4306] Cannot create hsr debugfs directory [ 80.614946][ T4308] device hsr_slave_0 entered promiscuous mode [ 80.622007][ T4308] device hsr_slave_1 entered promiscuous mode [ 80.629246][ T4308] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.637156][ T4308] Cannot create hsr debugfs directory [ 80.658645][ T4318] device hsr_slave_0 entered promiscuous mode [ 80.669114][ T4318] device hsr_slave_1 entered promiscuous mode [ 80.676174][ T4318] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.684360][ T4318] Cannot create hsr debugfs directory [ 80.972895][ T4316] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.986503][ T4316] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.997209][ T4316] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.007148][ T4316] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.032327][ T4308] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.131259][ T4316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.146503][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.155743][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.167173][ T4316] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.183280][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.192637][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.202365][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.209516][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.220050][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.243025][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.260896][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.273087][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.280262][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.296877][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.336882][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.353995][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.372397][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.381665][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.398699][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.410672][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.419557][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.428724][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.437456][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.449455][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.459173][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.588994][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.597290][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.611042][ T4316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.641772][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.652188][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.676149][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.685758][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.695179][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.703108][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.717093][ T4316] device veth0_vlan entered promiscuous mode [ 81.741415][ T4316] device veth1_vlan entered promiscuous mode [ 81.782246][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 81.792272][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 81.801751][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 81.811494][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 81.823436][ T4316] device veth0_macvtap entered promiscuous mode [ 81.845883][ T4316] device veth1_macvtap entered promiscuous mode [ 81.866888][ T4316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.877857][ T4316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.890922][ T4316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.900917][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 81.910187][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 81.926969][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 81.941117][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 81.956367][ T4316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.976465][ T4316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.992847][ T4316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.002299][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.013042][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.024763][ T4316] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.035063][ T4316] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.045275][ T4316] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.054317][ T4316] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.182601][ T3081] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.203557][ T3081] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.204589][ T4276] Bluetooth: hci2: command 0x041b tx timeout [ 82.229603][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 82.252435][ T4276] Bluetooth: hci1: command 0x041b tx timeout [ 82.272598][ T4276] Bluetooth: hci0: command 0x041b tx timeout [ 82.286595][ T4267] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.307154][ T4192] Bluetooth: hci3: command 0x041b tx timeout [ 82.313639][ T4267] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.322739][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 82.365691][ T4192] Bluetooth: hci4: command 0x041b tx timeout [ 82.637824][ T4308] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.781129][ T4308] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.852865][ T4358] loop3: detected capacity change from 0 to 32768 [ 82.883332][ T4308] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.033169][ T4358] UFO tlock:0xffffc900028c2288 [ 83.056608][ T4358] ================================================================== [ 83.065057][ T4358] BUG: KASAN: use-after-free in lmWriteRecord+0x4c8/0x1aa0 [ 83.072316][ T4358] Read of size 32 at addr ffff888075122e00 by task syz.3.20/4358 [ 83.080069][ T4358] [ 83.082454][ T4358] CPU: 1 PID: 4358 Comm: syz.3.20 Not tainted syzkaller #0 [ 83.089698][ T4358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 83.099807][ T4358] Call Trace: [ 83.103119][ T4358] [ 83.106089][ T4358] dump_stack_lvl+0x168/0x230 [ 83.110808][ T4358] ? show_regs_print_info+0x20/0x20 [ 83.116044][ T4358] ? _printk+0xcc/0x110 [ 83.120232][ T4358] ? lmWriteRecord+0x4c8/0x1aa0 [ 83.125218][ T4358] ? load_image+0x3b0/0x3b0 [ 83.129777][ T4358] print_address_description+0x60/0x2d0 [ 83.135383][ T4358] ? lmWriteRecord+0x4c8/0x1aa0 [ 83.140282][ T4358] kasan_report+0xdf/0x130 [ 83.144746][ T4358] ? lmWriteRecord+0x4c8/0x1aa0 [ 83.149651][ T4358] ? lmWriteRecord+0x4c8/0x1aa0 [ 83.154537][ T4358] kasan_check_range+0x27b/0x290 [ 83.159516][ T4358] memcpy+0x25/0x60 [ 83.163384][ T4358] lmWriteRecord+0x4c8/0x1aa0 [ 83.168129][ T4358] lmLog+0x6f6/0xa30 [ 83.172163][ T4358] txCommit+0x1c2b/0x51c0 [ 83.176535][ T4358] ? ktime_get_real_ts64+0x420/0x420 [ 83.181886][ T4358] ? txLinelock+0x160/0x160 [ 83.186451][ T4358] ? rcu_is_watching+0x11/0xa0 [ 83.191471][ T4358] ? __mark_inode_dirty+0x3a4/0xc90 [ 83.196741][ T4358] jfs_mkdir+0x875/0xa70 [ 83.201039][ T4358] ? jfs_symlink+0xe60/0xe60 [ 83.205692][ T4358] ? make_kgid+0x640/0x640 [ 83.210156][ T4358] ? apparmor_path_mkdir+0x1a3/0x220 [ 83.211128][ T4308] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.215594][ T4358] ? generic_permission+0x230/0x510 [ 83.215646][ T4358] ? inode_permission+0xef/0x480 [ 83.215666][ T4358] ? bpf_lsm_inode_mkdir+0x5/0x10 [ 83.215686][ T4358] ? security_inode_mkdir+0xb3/0x100 [ 83.215714][ T4358] vfs_mkdir+0x387/0x570 [ 83.215745][ T4358] do_mkdirat+0x1d7/0x5a0 [ 83.215769][ T4358] ? vfs_mkdir+0x570/0x570 [ 83.256271][ T4358] ? getname_flags+0x1fe/0x500 [ 83.261090][ T4358] __x64_sys_mkdirat+0x85/0x90 [ 83.266092][ T4358] do_syscall_64+0x4c/0xa0 [ 83.270559][ T4358] ? clear_bhb_loop+0x30/0x80 [ 83.275290][ T4358] ? clear_bhb_loop+0x30/0x80 [ 83.280016][ T4358] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 83.285960][ T4358] RIP: 0033:0x7f8887496e97 [ 83.290422][ T4358] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.310081][ T4358] RSP: 002b:00007f8886b06e68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 83.318546][ T4358] RAX: ffffffffffffffda RBX: 00007f8886b06ef0 RCX: 00007f8887496e97 [ 83.326568][ T4358] RDX: 00000000000001ff RSI: 0000200000000000 RDI: 00000000ffffff9c [ 83.334616][ T4358] RBP: 00002000000002c0 R08: 0000200000000080 R09: 0000000000000000 [ 83.343790][ T4358] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000200000000000 [ 83.351804][ T4358] R13: 00007f8886b06eb0 R14: 0000000000000000 R15: 0000000000000000 [ 83.359833][ T4358] [ 83.362887][ T4358] [ 83.365241][ T4358] Allocated by task 3560: [ 83.369605][ T4358] __kasan_kmalloc+0xb5/0xf0 [ 83.374244][ T4358] kernfs_fop_open+0x8cc/0xbf0 [ 83.379103][ T4358] do_dentry_open+0x7ff/0xf80 [ 83.383818][ T4358] path_openat+0x2682/0x2f30 [ 83.388458][ T4358] do_filp_open+0x1b3/0x3e0 [ 83.393014][ T4358] do_sys_openat2+0x142/0x4a0 [ 83.397763][ T4358] __x64_sys_openat+0x135/0x160 [ 83.402666][ T4358] do_syscall_64+0x4c/0xa0 [ 83.407126][ T4358] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 83.413061][ T4358] [ 83.415421][ T4358] Freed by task 3560: [ 83.419435][ T4358] kasan_set_track+0x4b/0x70 [ 83.424060][ T4358] kasan_set_free_info+0x1f/0x40 [ 83.429031][ T4358] ____kasan_slab_free+0xd5/0x110 [ 83.434229][ T4358] slab_free_freelist_hook+0xea/0x170 [ 83.439648][ T4358] kfree+0xef/0x2a0 [ 83.443616][ T4358] kernfs_fop_release+0x1d9/0x2b0 [ 83.448772][ T4358] __fput+0x234/0x930 [ 83.452794][ T4358] task_work_run+0x125/0x1a0 [ 83.457415][ T4358] exit_to_user_mode_loop+0x10f/0x130 [ 83.462910][ T4358] exit_to_user_mode_prepare+0xee/0x180 [ 83.468507][ T4358] syscall_exit_to_user_mode+0x16/0x40 [ 83.474021][ T4358] do_syscall_64+0x58/0xa0 [ 83.478479][ T4358] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 83.484411][ T4358] [ 83.486771][ T4358] The buggy address belongs to the object at ffff888075122e00 [ 83.486771][ T4358] which belongs to the cache kmalloc-128 of size 128 [ 83.500873][ T4358] The buggy address is located 0 bytes inside of [ 83.500873][ T4358] 128-byte region [ffff888075122e00, ffff888075122e80) [ 83.514106][ T4358] The buggy address belongs to the page: [ 83.519786][ T4358] page:ffffea0001d44880 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x75122 [ 83.529978][ T4358] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 83.537601][ T4358] raw: 00fff00000000200 0000000000000000 dead000000000122 ffff8880168418c0 [ 83.546351][ T4358] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 83.554976][ T4358] page dumped because: kasan: bad access detected [ 83.561439][ T4358] page_owner tracks the page as allocated [ 83.567187][ T4358] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_HARDWALL), pid 4316, ts 82064775972, free_ts 81737936211 [ 83.584686][ T4358] get_page_from_freelist+0x1b77/0x1c60 [ 83.590288][ T4358] __alloc_pages+0x1e1/0x470 [ 83.594922][ T4358] new_slab+0xc0/0x4b0 [ 83.599226][ T4358] ___slab_alloc+0x81e/0xdf0 [ 83.603861][ T4358] kmem_cache_alloc_trace+0x1a5/0x2a0 [ 83.609271][ T4358] __hw_addr_add_ex+0x1fc/0x7a0 [ 83.614160][ T4358] dev_mc_add+0x91/0x110 [ 83.618438][ T4358] igmp_group_added+0x1be/0x8e0 [ 83.623329][ T4358] ____ip_mc_inc_group+0x87b/0xac0 [ 83.628487][ T4358] ip_mc_up+0x121/0x2f0 [ 83.632688][ T4358] inetdev_event+0xe02/0x1360 [ 83.637395][ T4358] raw_notifier_call_chain+0xcb/0x160 [ 83.642804][ T4358] __dev_notify_flags+0x178/0x2d0 [ 83.647866][ T4358] dev_change_flags+0xe3/0x1a0 [ 83.652800][ T4358] do_setlink+0xc01/0x3980 [ 83.657294][ T4358] rtnl_newlink+0x1419/0x17d0 [ 83.662104][ T4358] page last free stack trace: [ 83.666816][ T4358] free_unref_page_prepare+0x637/0x6c0 [ 83.672445][ T4358] free_unref_page+0x94/0x280 [ 83.677166][ T4358] __unfreeze_partials+0x1a5/0x200 [ 83.682309][ T4358] put_cpu_partial+0x12d/0x190 [ 83.687109][ T4358] qlist_free_all+0x35/0x90 [ 83.691650][ T4358] kasan_quarantine_reduce+0x150/0x160 [ 83.697151][ T4358] __kasan_slab_alloc+0x2f/0xd0 [ 83.702140][ T4358] slab_post_alloc_hook+0x4c/0x380 [ 83.707296][ T4358] kmem_cache_alloc_node+0x12d/0x2d0 [ 83.712726][ T4358] __alloc_skb+0xf4/0x750 [ 83.717111][ T4358] netlink_sendmsg+0x645/0xbc0 [ 83.722042][ T4358] __sys_sendto+0x423/0x580 [ 83.726597][ T4358] __x64_sys_sendto+0xda/0xf0 [ 83.731450][ T4358] do_syscall_64+0x4c/0xa0 [ 83.735989][ T4358] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 83.741930][ T4358] [ 83.744288][ T4358] Memory state around the buggy address: [ 83.749942][ T4358] ffff888075122d00: 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc [ 83.758034][ T4358] ffff888075122d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 83.766140][ T4358] >ffff888075122e00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 83.774240][ T4358] ^ [ 83.778340][ T4358] ffff888075122e80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 83.786441][ T4358] ffff888075122f00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 83.794824][ T4358] ================================================================== [ 83.802917][ T4358] Disabling lock debugging due to kernel taint [ 83.814290][ T4308] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.833217][ T4358] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 83.840483][ T4358] CPU: 1 PID: 4358 Comm: syz.3.20 Tainted: G B syzkaller #0 [ 83.849103][ T4358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 83.859209][ T4358] Call Trace: [ 83.862529][ T4358] [ 83.865496][ T4358] dump_stack_lvl+0x168/0x230 [ 83.870223][ T4358] ? show_regs_print_info+0x20/0x20 [ 83.875591][ T4358] ? load_image+0x3b0/0x3b0 [ 83.880129][ T4358] panic+0x2c9/0x7f0 [ 83.884070][ T4358] ? bpf_jit_dump+0xd0/0xd0 [ 83.888620][ T4358] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 83.894550][ T4358] ? _raw_spin_unlock+0x40/0x40 [ 83.899507][ T4358] ? print_memory_metadata+0x314/0x400 [ 83.905102][ T4358] ? lmWriteRecord+0x4c8/0x1aa0 [ 83.909999][ T4358] check_panic_on_warn+0x80/0xa0 [ 83.914973][ T4358] ? lmWriteRecord+0x4c8/0x1aa0 [ 83.919863][ T4358] end_report+0x6d/0xf0 [ 83.924055][ T4358] kasan_report+0x102/0x130 [ 83.928631][ T4358] ? lmWriteRecord+0x4c8/0x1aa0 [ 83.933701][ T4358] ? lmWriteRecord+0x4c8/0x1aa0 [ 83.938593][ T4358] kasan_check_range+0x27b/0x290 [ 83.943659][ T4358] memcpy+0x25/0x60 [ 83.947596][ T4358] lmWriteRecord+0x4c8/0x1aa0 [ 83.952408][ T4358] lmLog+0x6f6/0xa30 [ 83.956351][ T4358] txCommit+0x1c2b/0x51c0 [ 83.960831][ T4358] ? ktime_get_real_ts64+0x420/0x420 [ 83.966172][ T4358] ? txLinelock+0x160/0x160 [ 83.970729][ T4358] ? rcu_is_watching+0x11/0xa0 [ 83.975530][ T4358] ? __mark_inode_dirty+0x3a4/0xc90 [ 83.980777][ T4358] jfs_mkdir+0x875/0xa70 [ 83.985081][ T4358] ? jfs_symlink+0xe60/0xe60 [ 83.989719][ T4358] ? make_kgid+0x640/0x640 [ 83.994179][ T4358] ? apparmor_path_mkdir+0x1a3/0x220 [ 83.998740][ T4305] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.999522][ T4358] ? generic_permission+0x230/0x510 [ 84.011433][ T4358] ? inode_permission+0xef/0x480 [ 84.016530][ T4358] ? bpf_lsm_inode_mkdir+0x5/0x10 [ 84.021688][ T4358] ? security_inode_mkdir+0xb3/0x100 [ 84.027013][ T4358] vfs_mkdir+0x387/0x570 [ 84.031455][ T4358] do_mkdirat+0x1d7/0x5a0 [ 84.035827][ T4358] ? vfs_mkdir+0x570/0x570 [ 84.040285][ T4358] ? getname_flags+0x1fe/0x500 [ 84.045281][ T4358] __x64_sys_mkdirat+0x85/0x90 [ 84.050098][ T4358] do_syscall_64+0x4c/0xa0 [ 84.054529][ T4358] ? clear_bhb_loop+0x30/0x80 [ 84.059226][ T4358] ? clear_bhb_loop+0x30/0x80 [ 84.063915][ T4358] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 84.069993][ T4358] RIP: 0033:0x7f8887496e97 [ 84.074590][ T4358] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.094466][ T4358] RSP: 002b:00007f8886b06e68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 84.103044][ T4358] RAX: ffffffffffffffda RBX: 00007f8886b06ef0 RCX: 00007f8887496e97 [ 84.111159][ T4358] RDX: 00000000000001ff RSI: 0000200000000000 RDI: 00000000ffffff9c [ 84.119145][ T4358] RBP: 00002000000002c0 R08: 0000200000000080 R09: 0000000000000000 [ 84.127147][ T4358] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000200000000000 [ 84.135147][ T4358] R13: 00007f8886b06eb0 R14: 0000000000000000 R15: 0000000000000000 [ 84.143355][ T4358] [ 84.146841][ T4358] Kernel Offset: disabled [ 84.151204][ T4358] Rebooting in 86400 seconds..