Warning: Permanently added '10.128.0.241' (ED25519) to the list of known hosts. 2026/04/27 05:40:29 parsed 1 programs syzkaller login: [ 81.657910][ T5597] cgroup: Unknown subsys name 'net' [ 81.895060][ T5597] cgroup: Unknown subsys name 'cpuset' [ 81.969159][ T5597] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.641423][ T5597] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.786434][ T1001] cfg80211: failed to load regulatory.db [ 89.533711][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.533841][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.534013][ T5618] bridge_slave_0: entered allmulticast mode [ 89.548130][ T5618] bridge_slave_0: entered promiscuous mode [ 89.620926][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.621041][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.621208][ T5618] bridge_slave_1: entered allmulticast mode [ 89.623546][ T5618] bridge_slave_1: entered promiscuous mode [ 89.844724][ T5618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.896667][ T5618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.963739][ T1738] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.971500][ T1738] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.304348][ T5618] team0: Port device team_slave_0 added [ 90.538442][ T5618] team0: Port device team_slave_1 added [ 90.802887][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.802899][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.802912][ T5618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.805966][ T1023] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.805985][ T1023] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.886739][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.886755][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.886769][ T5618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.144096][ T5618] hsr_slave_0: entered promiscuous mode [ 91.146168][ T5618] hsr_slave_1: entered promiscuous mode [ 91.308128][ T4913] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.349495][ T4913] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.351269][ T4913] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.358026][ T4913] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.373890][ T4913] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.756018][ T5618] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.890191][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.894143][ T5618] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.933036][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.933841][ T5618] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.985564][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.996408][ T5618] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 93.044762][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.500982][ T59] Bluetooth: hci0: command tx timeout [ 93.823735][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.041596][ T5618] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.238127][ T1023] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.241699][ T1023] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.306650][ T1738] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.306769][ T1738] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.721591][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.954972][ T5618] veth0_vlan: entered promiscuous mode [ 94.992005][ T5618] veth1_vlan: entered promiscuous mode [ 95.051228][ T5618] veth0_macvtap: entered promiscuous mode [ 95.058449][ T5618] veth1_macvtap: entered promiscuous mode [ 95.094815][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.115649][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.144376][ T1023] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.164242][ T1023] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.166142][ T1023] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.167677][ T1023] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/04/27 05:40:45 executed programs: 0 [ 95.568769][ T59] Bluetooth: hci0: command tx timeout [ 95.904238][ T4913] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 95.921670][ T4913] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 95.926187][ T4913] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 95.935725][ T5692] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 95.936414][ T5692] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 95.974087][ T5692] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 96.002089][ T5692] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 96.043880][ T59] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 96.105822][ T5692] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 96.107076][ T5692] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 96.165495][ T4913] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 96.219933][ T4913] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 96.223094][ T4913] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 96.226161][ T4913] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 96.244315][ T4913] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 96.245665][ T4913] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 96.247990][ T4913] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 96.254467][ T5747] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 96.294696][ T4913] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 96.316284][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 96.655099][ T5747] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 96.713771][ T5747] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 96.717270][ T5747] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 96.745473][ T5747] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 96.747458][ T5747] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 98.059497][ T59] Bluetooth: hci1: command tx timeout [ 98.369763][ T59] Bluetooth: hci2: command tx timeout [ 98.588304][ T1023] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.690210][ T59] Bluetooth: hci4: command tx timeout [ 98.690773][ T59] Bluetooth: hci3: command tx timeout [ 98.850551][ T59] Bluetooth: hci5: command tx timeout [ 98.882811][ T1023] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.232628][ T1023] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.622054][ T1023] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.082140][ T5737] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.082270][ T5737] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.082569][ T5737] bridge_slave_0: entered allmulticast mode [ 100.084240][ T5737] bridge_slave_0: entered promiscuous mode [ 100.088093][ T5738] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.088206][ T5738] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.088367][ T5738] bridge_slave_0: entered allmulticast mode [ 100.111416][ T5738] bridge_slave_0: entered promiscuous mode [ 100.128789][ T59] Bluetooth: hci1: command tx timeout [ 100.185884][ T5737] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.186015][ T5737] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.186191][ T5737] bridge_slave_1: entered allmulticast mode [ 100.187630][ T5737] bridge_slave_1: entered promiscuous mode [ 100.189265][ T5738] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.189375][ T5738] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.189522][ T5738] bridge_slave_1: entered allmulticast mode [ 100.191952][ T5738] bridge_slave_1: entered promiscuous mode [ 100.315262][ T5749] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.315351][ T5749] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.315664][ T5749] bridge_slave_0: entered allmulticast mode [ 100.317070][ T5749] bridge_slave_0: entered promiscuous mode [ 100.356295][ T5735] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.356408][ T5735] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.356644][ T5735] bridge_slave_0: entered allmulticast mode [ 100.358370][ T5735] bridge_slave_0: entered promiscuous mode [ 100.416110][ T5749] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.416207][ T5749] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.416331][ T5749] bridge_slave_1: entered allmulticast mode [ 100.419483][ T5749] bridge_slave_1: entered promiscuous mode [ 100.425973][ T5733] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.426085][ T5733] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.426255][ T5733] bridge_slave_0: entered allmulticast mode [ 100.431879][ T5733] bridge_slave_0: entered promiscuous mode [ 100.436710][ T5735] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.436910][ T5735] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.437059][ T5735] bridge_slave_1: entered allmulticast mode [ 100.442245][ T5735] bridge_slave_1: entered promiscuous mode [ 100.452303][ T59] Bluetooth: hci2: command tx timeout [ 100.456601][ T5737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.472971][ T5738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.515120][ T5733] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.515269][ T5733] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.515424][ T5733] bridge_slave_1: entered allmulticast mode [ 100.518193][ T5733] bridge_slave_1: entered promiscuous mode [ 100.563605][ T5737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.566369][ T5738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.675321][ T5749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.706229][ T5735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.747272][ T5749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.759648][ T5733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.768894][ T59] Bluetooth: hci4: command tx timeout [ 100.768925][ T59] Bluetooth: hci3: command tx timeout [ 100.928761][ T5747] Bluetooth: hci5: command tx timeout [ 101.029028][ T1023] bridge_slave_1: left allmulticast mode [ 101.029218][ T1023] bridge_slave_1: left promiscuous mode [ 101.035847][ T1023] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.132287][ T1023] bridge_slave_0: left allmulticast mode [ 101.132311][ T1023] bridge_slave_0: left promiscuous mode [ 101.132475][ T1023] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.869335][ T1023] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.949422][ T1023] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.970812][ T1023] bond0 (unregistering): Released all slaves [ 102.111142][ T5735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.115256][ T5737] team0: Port device team_slave_0 added [ 102.117203][ T5738] team0: Port device team_slave_0 added [ 102.138990][ T5733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.208974][ T5747] Bluetooth: hci1: command tx timeout [ 102.478900][ T5737] team0: Port device team_slave_1 added [ 102.481148][ T5738] team0: Port device team_slave_1 added [ 102.528684][ T5747] Bluetooth: hci2: command tx timeout [ 102.574340][ T5749] team0: Port device team_slave_0 added [ 102.603889][ T5735] team0: Port device team_slave_0 added [ 102.636549][ T5749] team0: Port device team_slave_1 added [ 102.646009][ T5733] team0: Port device team_slave_0 added [ 102.651831][ T5735] team0: Port device team_slave_1 added [ 102.655424][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.655440][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.655464][ T5737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.656779][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.656789][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.656806][ T5738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.729095][ T5733] team0: Port device team_slave_1 added [ 102.729918][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.729930][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.729955][ T5737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.734327][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.734342][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.734367][ T5738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.852115][ T5747] Bluetooth: hci3: command tx timeout [ 102.852148][ T59] Bluetooth: hci4: command tx timeout [ 102.867147][ T5749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.867163][ T5749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.867186][ T5749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.868820][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.868836][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.868859][ T5735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.933139][ T5749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.933156][ T5749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.933180][ T5749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.949692][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.949709][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.949734][ T5735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.959380][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.959396][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.959420][ T5733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.008805][ T59] Bluetooth: hci5: command tx timeout [ 103.019092][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.019108][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.019132][ T5733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.156279][ T5738] hsr_slave_0: entered promiscuous mode [ 103.157043][ T5738] hsr_slave_1: entered promiscuous mode [ 103.157705][ T5738] debugfs: 'hsr0' already exists in 'hsr' [ 103.157797][ T5738] Cannot create hsr debugfs directory [ 103.230519][ T5737] hsr_slave_0: entered promiscuous mode [ 103.233647][ T5737] hsr_slave_1: entered promiscuous mode [ 103.234578][ T5737] debugfs: 'hsr0' already exists in 'hsr' [ 103.234601][ T5737] Cannot create hsr debugfs directory [ 103.730922][ T1023] hsr_slave_0: left promiscuous mode [ 103.768794][ T1023] hsr_slave_1: left promiscuous mode [ 103.769841][ T1023] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.769892][ T1023] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.810472][ T1023] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.810498][ T1023] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.871733][ T1023] veth1_macvtap: left promiscuous mode [ 103.871885][ T1023] veth0_macvtap: left promiscuous mode [ 103.872039][ T1023] veth1_vlan: left promiscuous mode [ 103.872208][ T1023] veth0_vlan: left promiscuous mode [ 104.288737][ T59] Bluetooth: hci1: command tx timeout [ 104.579296][ T1023] team0 (unregistering): Port device team_slave_1 removed [ 104.608708][ T59] Bluetooth: hci2: command tx timeout [ 104.625517][ T1023] team0 (unregistering): Port device team_slave_0 removed [ 104.846777][ T5749] hsr_slave_0: entered promiscuous mode [ 104.847541][ T5749] hsr_slave_1: entered promiscuous mode [ 104.928734][ T59] Bluetooth: hci3: command tx timeout [ 104.928766][ T59] Bluetooth: hci4: command tx timeout [ 104.944721][ T5258] 8021q: adding VLAN 0 to HW filter on device eth1 [ 104.982880][ T5735] hsr_slave_0: entered promiscuous mode [ 104.983731][ T5735] hsr_slave_1: entered promiscuous mode [ 104.984698][ T5735] debugfs: 'hsr0' already exists in 'hsr' [ 104.984722][ T5735] Cannot create hsr debugfs directory [ 105.008643][ T5733] hsr_slave_0: entered promiscuous mode [ 105.010039][ T5733] hsr_slave_1: entered promiscuous mode [ 105.010901][ T5733] debugfs: 'hsr0' already exists in 'hsr' [ 105.010922][ T5733] Cannot create hsr debugfs directory [ 105.089278][ T5747] Bluetooth: hci5: command tx timeout [ 106.191845][ T5258] 8021q: adding VLAN 0 to HW filter on device eth2 [ 106.224106][ T5738] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 106.263164][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 106.277681][ T5738] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 106.336923][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 106.464135][ T5738] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 106.513028][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 106.526856][ T5738] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 106.552946][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 107.285127][ T5738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.355100][ T5738] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.392625][ T162] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.396665][ T162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.453704][ T91] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.453863][ T91] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.044924][ T5737] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 108.144518][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 108.167693][ T5737] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 108.216675][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 108.236305][ T5737] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 108.263411][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 108.319659][ T5737] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 108.353739][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 108.566188][ T5735] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 108.680836][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 108.702719][ T5735] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 108.784733][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 108.804031][ T5735] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 108.843036][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 108.909829][ T5735] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 108.956150][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 109.135395][ T5738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.198281][ T5749] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 109.252354][ T5749] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 109.260624][ T5749] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 109.293159][ T5749] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 109.302031][ T5749] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 109.331979][ T5749] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 109.364595][ T5749] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 109.392956][ T5749] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 109.517704][ T5733] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 109.556906][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 109.567221][ T5733] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 109.592326][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 109.607924][ T5733] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 109.631641][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 109.637752][ T5733] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 109.683075][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 109.727336][ T5737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.793106][ T5738] veth0_vlan: entered promiscuous mode [ 109.887311][ T5738] veth1_vlan: entered promiscuous mode [ 109.912056][ T5737] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.944352][ T1738] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.944457][ T1738] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.993149][ T1738] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.993280][ T1738] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.044750][ T5735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.126050][ T5738] veth0_macvtap: entered promiscuous mode [ 110.152999][ T5735] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.170307][ T5749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.176489][ T5738] veth1_macvtap: entered promiscuous mode [ 110.206787][ T1738] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.206921][ T1738] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.247248][ T1023] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.247416][ T1023] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.323518][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.325166][ T5749] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.385777][ T5733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.393820][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.412424][ T1738] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.412659][ T1738] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.477182][ T91] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.486170][ T1738] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.486333][ T1738] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.488714][ T91] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.502132][ T1023] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.567841][ T1023] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.624556][ T5733] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.772826][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.773064][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.959798][ T1023] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.959933][ T1023] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.084817][ T1023] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.084838][ T1023] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.375780][ T162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.375801][ T162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/04/27 05:41:01 executed programs: 10 [ 111.661663][ T5737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.966955][ T5737] veth0_vlan: entered promiscuous mode [ 112.053298][ T5737] veth1_vlan: entered promiscuous mode [ 112.268266][ T5737] veth0_macvtap: entered promiscuous mode [ 112.349303][ T5737] veth1_macvtap: entered promiscuous mode [ 112.570522][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.589802][ T5735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.620269][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.709921][ T1738] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.714616][ T1738] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.716208][ T1738] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.722909][ T1738] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.899185][ T5749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.983069][ T5733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.033431][ T5975] loop3: detected capacity change from 0 to 32768 [ 113.519918][ T5735] veth0_vlan: entered promiscuous mode [ 113.788829][ T91] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.788848][ T91] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.801366][ T5735] veth1_vlan: entered promiscuous mode [ 114.089908][ C1] ================================================================== [ 114.089923][ C1] BUG: KASAN: slab-use-after-free in lbmIODone+0x1312/0x16c0 [ 114.089956][ C1] Read of size 4 at addr ffff888032509208 by task rcuc/1/28 [ 114.089968][ C1] [ 114.089991][ C1] CPU: 1 UID: 0 PID: 28 Comm: rcuc/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 114.090020][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 114.090044][ C1] Call Trace: [ 114.090050][ C1] [ 114.090057][ C1] dump_stack_lvl+0xe8/0x150 [ 114.090076][ C1] print_address_description+0x55/0x1e0 [ 114.090093][ C1] ? lbmIODone+0x1312/0x16c0 [ 114.090107][ C1] print_report+0x58/0x70 [ 114.090119][ C1] kasan_report+0x117/0x150 [ 114.090134][ C1] ? lbmIODone+0x1312/0x16c0 [ 114.090152][ C1] lbmIODone+0x1312/0x16c0 [ 114.090167][ C1] ? blkg_put+0x22/0x240 [ 114.090188][ C1] ? blkg_put+0x22/0x240 [ 114.090206][ C1] ? blkg_put+0x18d/0x240 [ 114.090226][ C1] ? bio_endio+0x989/0x9d0 [ 114.090250][ C1] blk_update_request+0x57e/0xe60 [ 114.090272][ C1] blk_mq_end_request+0x3e/0x70 [ 114.090287][ C1] blk_done_softirq+0x10a/0x160 [ 114.090303][ C1] handle_softirqs+0x1de/0x6d0 [ 114.090324][ C1] __local_bh_enable_ip+0x170/0x2b0 [ 114.090338][ C1] ? rcu_cpu_kthread+0x205/0x1470 [ 114.090357][ C1] rcu_cpu_kthread+0x9e8/0x1470 [ 114.090379][ C1] ? rcu_cpu_kthread+0x205/0x1470 [ 114.090400][ C1] ? __pfx_rcu_cpu_kthread+0x10/0x10 [ 114.090418][ C1] ? schedule+0x90/0x360 [ 114.090441][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 114.090455][ C1] smpboot_thread_fn+0x541/0xa50 [ 114.090470][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 114.090486][ C1] kthread+0x388/0x470 [ 114.090504][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 114.090518][ C1] ? __pfx_kthread+0x10/0x10 [ 114.090533][ C1] ret_from_fork+0x514/0xb70 [ 114.090549][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 114.090563][ C1] ? __switch_to+0xc79/0x1410 [ 114.090584][ C1] ? __pfx_kthread+0x10/0x10 [ 114.090601][ C1] ret_from_fork_asm+0x1a/0x30 [ 114.090623][ C1] [ 114.090627][ C1] [ 114.090637][ C1] Allocated by task 5975: [ 114.090644][ C1] kasan_save_track+0x3e/0x80 [ 114.090656][ C1] __kasan_kmalloc+0x93/0xb0 [ 114.090669][ C1] __kmalloc_cache_noprof+0x3a6/0x690 [ 114.090683][ C1] lmLogInit+0x3e5/0x1a00 [ 114.090696][ C1] lmLogOpen+0x4e1/0xfa0 [ 114.090710][ C1] jfs_mount_rw+0xee/0x670 [ 114.090724][ C1] jfs_fill_super+0x754/0xd80 [ 114.090743][ C1] get_tree_bdev_flags+0x431/0x4f0 [ 114.090757][ C1] vfs_get_tree+0x92/0x2a0 [ 114.090770][ C1] do_new_mount+0x341/0xd30 [ 114.090787][ C1] __se_sys_mount+0x31d/0x420 [ 114.090804][ C1] do_syscall_64+0x15f/0xf80 [ 114.090817][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.090831][ C1] [ 114.090835][ C1] Freed by task 5738: [ 114.090842][ C1] kasan_save_track+0x3e/0x80 [ 114.090853][ C1] kasan_save_free_info+0x46/0x50 [ 114.090871][ C1] __kasan_slab_free+0x5c/0x80 [ 114.090884][ C1] kfree+0x1c5/0x6c0 [ 114.090897][ C1] lmLogShutdown+0x456/0x850 [ 114.090912][ C1] lmLogClose+0x28a/0x520 [ 114.090925][ C1] jfs_umount+0x2fb/0x3d0 [ 114.090942][ C1] jfs_put_super+0x8c/0x190 [ 114.090954][ C1] generic_shutdown_super+0x13d/0x2d0 [ 114.090965][ C1] kill_block_super+0x44/0x90 [ 114.090976][ C1] deactivate_locked_super+0xbc/0x130 [ 114.090987][ C1] cleanup_mnt+0x437/0x4d0 [ 114.090999][ C1] task_work_run+0x1d9/0x270 [ 114.091014][ C1] exit_to_user_mode_loop+0xed/0x480 [ 114.091029][ C1] do_syscall_64+0x33e/0xf80 [ 114.091039][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.091051][ C1] [ 114.091055][ C1] The buggy address belongs to the object at ffff888032509200 [ 114.091055][ C1] which belongs to the cache kmalloc-256 of size 256 [ 114.091068][ C1] The buggy address is located 8 bytes inside of [ 114.091068][ C1] freed 256-byte region [ffff888032509200, ffff888032509300) [ 114.091081][ C1] [ 114.091085][ C1] The buggy address belongs to the physical page: [ 114.091103][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x32508 [ 114.091117][ C1] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 114.091128][ C1] flags: 0x80000000000040(head|node=0|zone=1) [ 114.091144][ C1] page_type: f5(slab) [ 114.091155][ C1] raw: 0080000000000040 ffff88801a00bb40 dead000000000100 dead000000000122 [ 114.091166][ C1] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 114.091178][ C1] head: 0080000000000040 ffff88801a00bb40 dead000000000100 dead000000000122 [ 114.091189][ C1] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 114.091200][ C1] head: 0080000000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 114.091212][ C1] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000002 [ 114.091219][ C1] page dumped because: kasan: bad access detected [ 114.091230][ C1] page_owner tracks the page as allocated [ 114.091245][ C1] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 17792835221, free_ts 0 [ 114.091269][ C1] post_alloc_hook+0x231/0x280 [ 114.091284][ C1] get_page_from_freelist+0x27c8/0x2840 [ 114.091302][ C1] __alloc_frozen_pages_noprof+0x18d/0x380 [ 114.091317][ C1] allocate_slab+0x77/0x660 [ 114.091335][ C1] refill_objects+0x33c/0x3d0 [ 114.091351][ C1] __pcs_replace_empty_main+0x373/0x720 [ 114.091369][ C1] __kmalloc_noprof+0x530/0x7b0 [ 114.091383][ C1] ops_init+0x1eb/0x5c0 [ 114.091396][ C1] register_pernet_operations+0x343/0x830 [ 114.091408][ C1] register_pernet_subsys+0x28/0x40 [ 114.091419][ C1] tcf_register_action+0x8f/0x670 [ 114.091437][ C1] do_one_initcall+0x250/0x870 [ 114.091455][ C1] do_initcall_level+0x104/0x190 [ 114.091472][ C1] do_initcalls+0x59/0xa0 [ 114.091486][ C1] kernel_init_freeable+0x2a6/0x3e0 [ 114.091502][ C1] kernel_init+0x1d/0x1d0 [ 114.091515][ C1] page_owner free stack trace missing [ 114.091520][ C1] [ 114.091523][ C1] Memory state around the buggy address: [ 114.091530][ C1] ffff888032509100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 114.091539][ C1] ffff888032509180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 114.091547][ C1] >ffff888032509200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 114.091553][ C1] ^ [ 114.091559][ C1] ffff888032509280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 114.091567][ C1] ffff888032509300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 114.091573][ C1] ================================================================== [ 114.091589][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 114.091601][ C1] CPU: 1 UID: 0 PID: 28 Comm: rcuc/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 114.091617][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 114.091625][ C1] Call Trace: [ 114.091631][ C1] [ 114.091638][ C1] vpanic+0x56c/0xa60 [ 114.091655][ C1] ? __pfx_vpanic+0x10/0x10 [ 114.091674][ C1] panic+0xc5/0xd0 [ 114.091690][ C1] ? __pfx_panic+0x10/0x10 [ 114.091707][ C1] ? lbmIODone+0x1312/0x16c0 [ 114.091724][ C1] ? rcu_is_watching+0x15/0xb0 [ 114.091747][ C1] ? lbmIODone+0x1312/0x16c0 [ 114.091764][ C1] check_panic_on_warn+0x89/0xb0 [ 114.091785][ C1] ? lbmIODone+0x1312/0x16c0 [ 114.091802][ C1] end_report+0x73/0x170 [ 114.091818][ C1] ? lbmIODone+0x1312/0x16c0 [ 114.091832][ C1] kasan_report+0x128/0x150 [ 114.091845][ C1] ? lbmIODone+0x1312/0x16c0 [ 114.091862][ C1] lbmIODone+0x1312/0x16c0 [ 114.091878][ C1] ? blkg_put+0x22/0x240 [ 114.091897][ C1] ? blkg_put+0x22/0x240 [ 114.091919][ C1] ? blkg_put+0x18d/0x240 [ 114.091941][ C1] ? bio_endio+0x989/0x9d0 [ 114.091960][ C1] blk_update_request+0x57e/0xe60 [ 114.091983][ C1] blk_mq_end_request+0x3e/0x70 [ 114.091998][ C1] blk_done_softirq+0x10a/0x160 [ 114.092012][ C1] handle_softirqs+0x1de/0x6d0 [ 114.092029][ C1] __local_bh_enable_ip+0x170/0x2b0 [ 114.092042][ C1] ? rcu_cpu_kthread+0x205/0x1470 [ 114.092058][ C1] rcu_cpu_kthread+0x9e8/0x1470 [ 114.092076][ C1] ? rcu_cpu_kthread+0x205/0x1470 [ 114.092094][ C1] ? __pfx_rcu_cpu_kthread+0x10/0x10 [ 114.092111][ C1] ? schedule+0x90/0x360 [ 114.092131][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 114.092147][ C1] smpboot_thread_fn+0x541/0xa50 [ 114.092164][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 114.092180][ C1] kthread+0x388/0x470 [ 114.092200][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 114.092216][ C1] ? __pfx_kthread+0x10/0x10 [ 114.092234][ C1] ret_from_fork+0x514/0xb70 [ 114.092258][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 114.092274][ C1] ? __switch_to+0xc79/0x1410 [ 114.092296][ C1] ? __pfx_kthread+0x10/0x10 [ 114.092314][ C1] ret_from_fork_asm+0x1a/0x30 [ 114.092338][ C1] [ 114.092972][ C1] Kernel Offset: disabled